High severity8.8NVD Advisory· Published Jun 1, 2018· Updated Jun 17, 2026
CVE-2018-11538
CVE-2018-11538
Description
servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST parameters because of CSRF Token Bypass.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:searchblox:searchblox:8.6.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:searchblox:searchblox:8.6.6:*:*:*:*:*:*:*
- (no CPE)range: =8.6.6
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/147977/SearchBlox-8.6.6-Cross-Site-Request-Forgery.htmlnvdExploitThird Party AdvisoryVDB Entry
- gurelahmet.com/cve-2018-11538-csrf-privilege-escalation-creation-of-an-administrator-account-on-searchblox-8-6-6/nvdExploitThird Party Advisory
- www.exploit-db.com/exploits/44801/nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.