Vulnerabilities (CVE)

Filtered by vendor Onethink Subscribe
Filtered by product Onethink
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-16449 1 Onethink 1 Onethink 2018-10-04 4.3 MEDIUM 6.5 MEDIUM
OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus/status/1.html.