E18-0nyy1
CVSS:
8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
5
Year:
2018
Description
This strike exploits cross site request forgery vulnerabilities in Easy Hosting Control Panel.
This vulnerability is due to lack of CSRF tokens to protect against malicious HTTP requests.
By enticing an authenticated user to visit an attacker controlled webpage or click a malicious link, an attacker could delete the entire database or manipulate the availability of different services running on the server.
