CVE-2019-8910

An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=sitepost CSRF...

CVE-2019-8909

WTCMS 1.0 contains a denial-of-service vulnerability whereby remote attackers can induce resource consumption by sending specially crafted dimensions for the verification-code image. Affected product: WTCMS 1.0. Root cause: the verification code image handling accepts crafted dimensions, leading ...

Code execution vulnerability in WTCMS backend

WTCMS is a content management system CMS based on Thinkphp. A code execution vulnerability exists in the WTCMS backend, which can be exploited by an attacker to gain control of the web server...

WTCMS Cross-Site Request Forgery Vulnerability

WTCMS is a content management system CMS based on Thinkphp. A cross-site request forgery vulnerability exists in WTCMS version 1.0. A remote attacker can exploit this vulnerability to add an administrator account with the help of the index.php?admin&m=user&a=addpost URI...

CVE-2018-10267

WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=addpost URI...

CVE-2018-10267

WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=addpost URI...

Cross site request forgery (csrf)

WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=addpost URI...

CVE-2018-10267

WTCMS 1.0 is affected by a CSRF vulnerability that allows an attacker to add an administrator account using the URI index.php?admin&m=user&a=add_post. Root cause: CSRF in the admin-user creation flow. Impact: attacker could elevate privileges by creating an admin account; no exploitation details ...

CVE-2018-10267

WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=addpost URI...

PT-2018-9797 · Wtcms · Wtcms

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue allows for the addition of an administrator account due to a CSRF vulnerability. This can be exploited via the "index.php?admin&m=user&a=add post" URI. Recommendations: For WTCMS version 1.0, as a...