TI-2018-06504 CVE-2018-8972 · GHSA-pww3-36m8-h684
Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality…
Priority LOW 39
Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a PHP shell tha…