Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Creditwestbank Subscribe
Filtered by product Cwcms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-8972 1 Creditwestbank 1 Cwcms 2018-04-24 6.8 MEDIUM 8.8 HIGH
Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a PHP shell that calls eval on request parameters.