CVE-2018-18449: Cross-Site Request Forgery (CSRF)

EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339...

PT-2019-9592

Name of the Vulnerable Software and Affected Versions EmpireCMS version 7.5 Description The issue allows for CSRF, enabling the addition of a user account through an action to e/admin/user/ListUser.php. This is achieved by utilizing the enews=AddUser action. Recommendations For EmpireCMS version...