CVE-2018-18921

PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-12-18

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Php Server Monitor (Phpservermonitor)

References

• https://github.com/phpservermon/phpservermon/issues/670
• https://medium.com/bugbountywriteup/cve-2018-18921-php-server-monitor-3-3-1-cross-site-request-forgery-a73e8dae563