CVE-2018-12494: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...

CVE-2018-12493: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI...

PublicCMS Cross-Site Request Forgery Vulnerability

PublicCMS is an open source content management system CMS written in Java. A cross-site request forgery vulnerability exists in 'admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list' in version 4.0.20180210 of PublicCMS . A remote attacker can exploit this vulnerability to add an...

CVE-2018-11500

An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account...

CVE-2018-11500

An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account...

Cross site request forgery (csrf)

An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account...

CVE-2018-11500

PublicCMS 4.0.20180210 contains a CSRF vulnerability in admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list that can be exploited to add an administrator account. This is the CVE-2018-11500 issue (NVD CVSSv3.0 base score 8.8; CVSSv2 base 6.8). The vulnerability is client-side re...

CVE-2018-11500: Cross-Site Request Forgery (CSRF)

An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account...