Security Advisory
CVE-2018-7308
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
A CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows arbitrary remote users to add/delete/modify any files in any hosting account.