CVE-2018-10295

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

CVE-2018-10295

CVE-2018-10295 affects ChemCMS v1.0.6. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be exploited via the public/admin/user/addpost.html page to add an administrator account. This could enable an attacker to gain admin privileges on the affected system. The documents do not pr...