CVE-2018-14960

Description

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/Xiao5uCompany_1.7_csrf.doc ↗
• http://blog.whiterabbitxyj.com/cve/Xiao5uCompany_1.7_csrf.doc ↗