cbcvebase.

Lunarcms Lunar Cms vulnerabilities

1 known vulnerability affecting lunarcms/lunar_cms.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2014-4718P4MEDIUMCVSS 6.8PoC≤ 3.3v3.1+2 more2014-07-03
CVE-2014-4718 [MEDIUM] CWE-352 CVE-2014-4718: Multiple cross-site request forgery (CSRF) vulnerabilities in Lunar CMS before 3.3-3 allow remote at Multiple cross-site request forgery (CSRF) vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that (1) add Super users via a request to admin/user_create.php or conduct cross-site scripting (XSS) attacks via the (2) email or (3) subject parameter in contact_form.ext.php to admin
nvd
Lunarcms Lunar Cms vulnerabilities | cvebase