CVE-2018-17045

An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksi_users.php?act=update.

• CWE-352

• https://github.com/maelosoki/MaeloStore/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://github.com/maelosoki/MaeloStore/issues/1Exploit, Issue Tracking, Third Party Advisory

Published

Sep 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17037user/editpost.php in UCMS 1.4.6 mishandles levels, which all…
• CVE-2018-17039MiniCMS 1.10, when Internet Explorer is used, allows XSS via…
• CVE-2018-1704IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spect…6.8
• CVE-2018-17042An issue has been found in dbf2txt through 2012-07-19. It is…
• CVE-2018-17043An issue has been found in doc2txt through 2014-03-19. It is…
• CVE-2018-17044In YzmCMS 5.1, stored XSS exists via the admin/system_manage…
• CVE-2018-17046translate man before 2018-08-21 has XSS via containers/outpu…
• CVE-2018-17048admin/Lib/Action/FpluginAction.class.php in FDCMS (aka Fangf…
• CVE-2018-17049CQU-LANKERS through 2017-11-02 has XSS via the public/api.ph…
• CVE-2018-1705IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spect…6.5
• CVE-2018-17050The mintToken function of a smart contract implementation fo…
• CVE-2018-17051K-Net Cisco Configuration Manager through 2014-11-19 has XSS…