{"vulnerability": "cve-2020-1845", "sightings": [{"uuid": "89dac26e-42c5-42f2-9745-bdc9553e510a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-18458", "type": "seen", "source": "https://t.me/cibsecurity/27254", "content": "\u203c CVE-2020-18458 \u203c\n\nCross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T22:39:59.000000Z"}, {"uuid": "382b2f44-3418-45a9-ae9c-9bef152eab9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-18451", "type": "seen", "source": "https://t.me/cibsecurity/27260", "content": "\u203c CVE-2020-18451 \u203c\n\nCross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T22:40:06.000000Z"}]}