PT-2022-9380

Name of the Vulnerable Software and Affected Versions Cacti version 1.1.38 Description The issue allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the new username field during creation of a new user via the "Copy" method at the "user admin.php"...

CVE-2019-10888

A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html...