CVE-2018-10127

An issue was discovered in XYHCMS 3.5

published April 16, 2018

CVSS
—
EPSS
0%
Percentile
39.0
In the wild
Unconfirmed
What it is

An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage&m=Rbac&a=addUser request, resulting in addition of an account with the administrator role.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00466 · 39.0th percentile
Published
2018-04-16T14:00Z
EPSS history
Timeline
  • 16 APR 14:00Z
    An issue was discovered in XYHCMS 3.5
    cvelistv5