2 matches found
UCMS Cross-Site Request Forgery Vulnerability
UCMS is a content management system written in PHP. A cross-site request forgery vulnerability exists in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to create an administrator account with the help of ?do=useraddpost...
CVE-2018-20598
UCMS 1.4.7 has ?do=useraddpost CSRF...