QwikSec

Security Database

CVE

CWE

Training

CVE-2014-8429

Published: Nov 28, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in Xavoc Technocrats xEpan CMS 1.0.4.1, 1.0.4, 1.0.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts via a crafted request to the owner/users page.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.htbridge.com/advisory/HTB23240

x_refsource_MISC

20141126 Cross-Site Request Forgery (CSRF) in xEpan

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.