Cscms

cscms

Vendor: Cscms Project • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-11527

1Cscms Project

1Cscms

Nov 21, 2024

May 29, 2018

N/A· v4

8.8 HIGH· v3

6.8 MEDIUM· v2

An issue was discovered in CScms v4.1. A Cross-site request forgery (CSRF) vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpas...Show more