CVE-2018-11445

EPSS 2.4%

A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0. A User can be added with the Admin role.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/44763/unverified exploitdbwww.exploit-db.com/exploits/44763unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://gist.github.com/NinjaXshell/a5fae5e2d1031ca59160fbe29d94279c https://www.exploit-db.com/exploits/44763/