CVE-2018-14960

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp.

• CWE-352

• http://blog.whiterabbitxyj.com/cve/Xiao5uCompany_1.7_csrf.docExploit, Technical Description, Third Party Advisory
• https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/Xiao5uCompany_1.7_csrf.docThird Party Advisory
• http://blog.whiterabbitxyj.com/cve/Xiao5uCompany_1.7_csrf.docExploit, Technical Description, Third Party Advisory
• https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/Xiao5uCompany_1.7_csrf.docThird Party Advisory

Published

Aug 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14955The mail message display page in SquirrelMail through 1.4.22…
• CVE-2018-14956CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaw…
• CVE-2018-14957CMS ISWEB 3.5.3 is vulnerable to directory traversal and loc…
• CVE-2018-14958An issue was discovered in WeaselCMS v0.3.5. CSRF can update…
• CVE-2018-14959An issue was discovered in WeaselCMS v0.3.5. CSRF can create…
• CVE-2018-1496IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 …5.4
• CVE-2018-14961dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sq…
• CVE-2018-14962zzcms 8.3 has stored XSS related to the content variable in …
• CVE-2018-14963zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI…
• CVE-2018-14964An issue was discovered in EMLsoft 5.4.5. XSS exists via the…
• CVE-2018-14965An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml…
• CVE-2018-14966An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml…