What’s Vulnerable › Vulnerabilities

CVE-2018-17081

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-09-26 · updated 2026-06-17
• Weakness: CWE-352

Description

e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used=1&id= for changing the title of an arbitrary page.

Affected products

• e107 CMS: 2.1.9

References

• https://github.com/himanshurahi/e107_2.1.9_CSRF_POC
• https://github.com/himanshurahi/e107_2.1.9_CSRF_POC

Get alerted when CVE-2018-17081 or the next vulnerability affects your stack