8 matches found
CVE-2019-16706
kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cmsuseradd.php...
CVE-2019-16706
The CVE-2019-16706 entry concerns kkcms v1.3, where a CSRF vulnerability allows an attacker to add a new user via admin/cms_user_add.php. The vulnerability affects the CMS component responsible for user management and is evidenced by multiple feeds (NVD entry notes CSRF with impact to confidentia...
CVE-2019-16706: Cross-Site Request Forgery (CSRF)
kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cmsuseradd.php...
Design/Logic Flaw
rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...
CVE-2018-16653
rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...
CVE-2018-16653
rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...
CVE-2018-16653
CVE-2018-16653 affects rejucms 2.1, with an XSS vulnerability in the ucenter/cms_user_add.php u_name parameter. Root cause is insufficient input filtering. Impact is user-side script execution in contexts where the affected page is rendered; CVSS metrics are provided (CVSS2: 4.3; CVSS3: 6.1), but...