Description
An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushState call.
Unscored
CVE-2018-10185
EUVD-2018-2263GHSA-qmmp-gc5q-cq8j
An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushSt…
Published Apr 17, 2018 · Updated Sep 17, 2024 · Assigned by mitre