CVE-2018-15845

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Gleez CMS 1.2.0 - Cross-Site Request Forgery (Add Admin)2018-08-27 · webapps · php

Impact

There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via `admin/users/add`.

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/gleez/cms/issues/800
• https://www.exploit-db.com/exploits/45258/
• https://github.com/advisories/GHSA-g644-x4hj-cmhq
• https://nvd.nist.gov/vuln/detail/CVE-2018-15845
• https://www.exploit-db.com/exploits/45258