CVE-2018-7176

FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka the "add user" feature of the User Permissions page).

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-02-16

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Frontaccounting (Frontaccounting)

References

• https://securitywarrior9.blogspot.in/2018/02/cross-site-request-forgery-front.html
• https://www.exploit-db.com/exploits/44137/