Vulnerabilities

TI-2020-13438 CVE-2020-18694 · GHSA-64vh-q3qf-wgf8

Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain…

MEDIUM 42

Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/save_profile".

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00926 Published 2021-08-06 No fix listed CWE-352

TI-2019-10044 CVE-2019-13370 · GHSA-2gp8-fw4p-p6jj

index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.

LOW 39

index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00638 Published 2019-07-06 No fix listed CWE-352

TI-2018-10881 CVE-2018-15203 · GHSA-546g-4wj5-vp4x

An issue was discovered in Ignited CMS through 2017-02-19.

LOW 29

An issue was discovered in Ignited CMS through 2017-02-19.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00439 Published 2018-08-08 No fix listed CWE-352

Vulnerabilities

Filters

Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain…

index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.

An issue was discovered in Ignited CMS through 2017-02-19.