CVE-2019-16706

The CVE-2019-16706 entry concerns kkcms v1.3, where a CSRF vulnerability allows an attacker to add a new user via admin/cms_user_add.php. The vulnerability affects the CMS component responsible for user management and is evidenced by multiple feeds (NVD entry notes CSRF with impact to confidentia...

CVE-2019-16706

kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cmsuseradd.php...

Design/Logic Flaw

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

CVE-2018-16653

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

CVE-2018-16653

rejucms 2.1 has XSS via the ucenter/cmsuseradd.php uname parameter...

CVE-2018-16653

CVE-2018-16653 affects rejucms 2.1, with an XSS vulnerability in the ucenter/cms_user_add.php u_name parameter. Root cause is insufficient input filtering. Impact is user-side script execution in contexts where the affected page is rendered; CVSS metrics are provided (CVSS2: 4.3; CVSS3: 6.1), but...