CVE-2018-17102

CVE-2018-17102 affects QuickAppsCMS (QACMS) up to version 2.0.0-beta2. The issue is a Cross-Site Request Forgery (CSRF) vulnerability that can change the administrator password via the /user/me URI. Documented impact indicates high-severity outcomes (e.g., unauthorized password change) with netwo...

CVE-2018-9108

CVE-2018-9108 affects QuickAppsCMS 2.0.0-beta2. Description: CSRF in /admin/user/manage/add allows an unauthorized remote attacker to create an admin account. CVSS3 base score 8.8 (HIGH); attack vector NETWORK; user interaction REQUIRED; confidentiality/ integrity/availability HIGH. No remediatio...