CVE-2018-12582

Summary : The CVE-2018-12582 issue affects AKCMS 6.1 and is a CSRF vulnerability that allows an attacker to add an administrator account via the URI /index.php?file=account&action=manageaccounts&job=newaccount. What’s affected : AKCMS 6.1 (PHP/MySQL-based CMS). Root cause : Cross-site request for...