3 matches found
CVE-2020-18418: Cross-Site Request Forgery (CSRF)
A Cross site request forgery CSRF vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert...
8.8CVSS7.7AI score0.00384EPSS
SaveExploits1References2
PT-2018-12925
Name of the Vulnerable Software and Affected Versions Gxlcms version 2.0 Description The issue allows for a CSRF attack, which can be used to add an administrator account through the news/index.php?s=Admin-Admin-Insert endpoint. Recommendations For Gxlcms version 2.0, consider implementing CSRF...
8.8CVSS0.00579EPSS
SaveExploits0References5
20