CVE-2018-10503

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-04-27 · updated 2026-06-17
Weakness: CWE-352

Description

An issue was discovered in index.php in baijiacms V4 v4_1_4_20170105. CSRF allows adding an administrator account via op=edituser, changing the administrator password via op=changepwd, or deleting an account via op=deleteuser.

Affected products

Baijiacms Project Baijiacms: 4_1_4_20170105

References

https://github.com/monburan/attack-baijiacmsV4-with-csrf
https://github.com/monburan/attack-baijiacmsV4-with-csrf

Get alerted when CVE-2018-10503 or the next vulnerability affects your stack