Cwcms

cwcms

Vendor: Creditwestbank • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-8972

1Creditwestbank

1Cwcms

Jun 17, 2026

Mar 24, 2018

N/A· v4

8.8 HIGH· v3

6.8 MEDIUM· v2

Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a PHP shell tha...Show more