CVE-2018-18422

UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/aadminx.php?x=a URI...

CVE-2018-18422

CVE-2018-18422 affects UsualToolCMS 8.0. The vulnerability is a CSRF flaw that allows an attacker to add a new user via the path cmsadmin/a_adminx.php?x=a. Reported CVSS metrics: CVSS v2 base 6.8 (MEDIUM) and CVSS v3 base 8.8 (HIGH). Root cause: CSRF in the user-creation flow. Impact details are ...

CVE-2018-18422: Cross-Site Request Forgery (CSRF)

UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/aadminx.php?x=a URI...

SQL Injection Vulnerability in UsualToolCMS pa***.php File

UsualToolCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. A SQL injection vulnerability exists in the UsualToolCMS pa.php file. An attacker can exploit the vulnerability to...

SQL Injection Vulnerability in UsualToolCMS v8.0Release

UsualToolCMS UTCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. UsualToolCMS v8.0Release suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability ...

Arbitrary File Deletion Vulnerability in UsualToolCMS

UsualToolCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. An arbitrary file deletion vulnerability exists in UsualToolCMS. An attacker can exploit the vulnerability to delete...

SQL Injection Vulnerability in UsualToolCMS Backend

UsualToolCMS is an enterprise-level web content management system written in PHP+MYSQL using template separation technology. UsualToolCMS v8.0 Release suffers from a SQL injection vulnerability in the backend, the vulnerability stems from the program failing to filter parameters, which can be...

Logic Design Vulnerability in UsualToolCMS Version 8.0.4

UsualToolCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. A logical design vulnerability exists in UsualToolCMS version 8.0.4. The vulnerability is caused due to the failure t...