3 matches found
CVE-2018-16431
This repository does not have a README...
8.8CVSS7.8AI score0.00845EPSS
SaveExploits1
CVE-2018-16431
admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account...
8.8CVSS5.8AI score0.00845EPSS
SaveExploits1References1
CVE-2018-16431
CVE-2018-16431 affects YFCMF v3.0. The vulnerability is a CSRF flaw in the admin/admin/adminsave.html endpoint that allows an attacker to add an administrator account. TheRoot cause involves insufficient CSRF protection on an admin-facing URL, enabling unauthorized privileged action without user ...
8.8CVSS8.5AI score0.00845EPSS
SaveExploits1References1Affected Software1
20