Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 42

Export CSV
CVE-2018-16448

Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/save.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Chshcms
Products
Cscms
CVE-2018-16337

An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Chshcms
Products
Cscms