CVE-2018-18941

In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password in the vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin HTML source code, and then creating a privileged user account. NOTE: this product is discontinued.

• CWE-200

• http://packetstormsecurity.com/files/150263/Vignette-Content-Management-6-Security-Bypass.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Nov/32Exploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/150263/Vignette-Content-Management-6-Security-Bypass.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Nov/32Exploit, Mailing List, Third Party Advisory

Published

Jan 31, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18935An issue was discovered in PopojiCMS v2.0.1. It has CSRF via…
• CVE-2018-18936An issue was discovered in PopojiCMS v2.0.1. admin_library.p…
• CVE-2018-18937An issue has been found in libIEC61850 v1.3. It is a NULL po…
• CVE-2018-18938An issue was discovered in WUZHI CMS 4.1.0. There is stored …
• CVE-2018-18939An issue was discovered in WUZHI CMS 4.1.0. There is stored …
• CVE-2018-18940servlet/SnoopServlet (a servlet installed by default) in Net…
• CVE-2018-18942In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php al…
• CVE-2018-18943An issue was discovered in baserCMS before 4.1.4. In the Reg…
• CVE-2018-18944Artha ~ The Open Thesaurus 1.0.3.0 has a Buffer Overflow.
• CVE-2018-18949Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injec…
• CVE-2018-1895IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vu…5.4
• CVE-2018-18950KindEditor through 4.1.11 has a path traversal vulnerability…