CVE-2018-11445 | BDVDB-2026-101168 Detail

Description#

A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0. A User can be added with the Admin role.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/44763/
https://gist.github.com/NinjaXshell/a5fae5e2d1031ca59160fbe29d94279c

Exploit#

https://www.exploit-db.com/exploits/44763/

History#

Version 12018-05-25Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.