Description
An issue was discovered in CScms v4.1. A Cross-site request forgery (CSRF) vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpass_save.
Unscored
CVE-2018-11527
EUVD-2018-3556GHSA-vwrf-vxhm-fjhr
An issue was discovered in CScms v4.1. A Cross-site request forgery (CSRF) vulnerability in plugins/sys/admin/Sys.php allows remote attacke…
Published May 29, 2018 · Updated Aug 5, 2024 · Assigned by mitre