Description
An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage&m=Rbac&a=addUser request, resulting in addition of an account with the administrator role.
Unscored
CVE-2018-10127
EUVD-2018-2205GHSA-m2cp-52xf-7gwp
An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage&m=Rbac&a=addUser request, resulting in addition of an account …
Published Apr 16, 2018 · Updated Sep 17, 2024 · Assigned by mitre