CVE-2018-16448

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and…

published September 4, 2018

CVSS
—
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Published
2018-09-04T04:00Z
EPSS history
Timeline
  • 04 SEP 04:00Z
    Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and…
    cvelistv5