CVE-2018-25190

creationtimestamp| type| source ---|---|--- 2026-03-06 15:57:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfoiird4t2n...

CVE-2018-25190

Easyndexer 1.0 is affected by a CSRF in createuser.php that enables unauthenticated attackers to create administrative accounts by submitting forged POSTs with username, password, name, surname, and privileges=1. CVSS v3.1: 5.3 (NETWORK, LOW CA/PR, NONE UI) with I/L; CVSS v4.0: 6.9 (NETWORK, LOW ...