high8.8Public exploit code
CVE-2018-14029
CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifying the account's em…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WityCMS 0.6.2 - Cross-Site Request Forgery (Password Change)2018-08-02 · webapps · php
Impact
CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifying the account's email field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Creatiwity | Witycms | Version 0.6.2 |