CVE-2018-15846

An issue was discovered in fledrCMS through 2014-02-03. There is a CSRF vulnerability that can change the administrator's password via index.php?p=done&savedata=1.

• CWE-352

• https://github.com/mattiapazienti/fledrCMS/issues/2Issue Tracking, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148992Third Party Advisory, VDB Entry
• https://github.com/mattiapazienti/fledrCMS/issues/2Issue Tracking, Vendor Advisory

Published

Aug 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1584IBM Maximo Asset Management 7.6 is vulnerable to cross-site …5.4
• CVE-2018-15840TP-Link TL-WR840N devices allow remote attackers to cause a …
• CVE-2018-15842WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug param…
• CVE-2018-15843GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New…
• CVE-2018-15844An issue was discovered in DamiCMS 6.0.0. There is an CSRF v…
• CVE-2018-15845There is a CSRF vulnerability that can add an administrator …
• CVE-2018-15847An issue was discovered in puppyCMS 5.1. There is an XSS vul…
• CVE-2018-15848An issue was discovered in portfolioCMS 1.0.5. There is CSRF…
• CVE-2018-15849An issue was discovered in portfolioCMS 1.0.5. There is CSRF…
• CVE-2018-1585IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6…5.4
• CVE-2018-15850An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF…
• CVE-2018-15851An issue was discovered in Flexo CMS v0.1.6. There is a CSRF…