phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid csrf_token_value field.

Published Jun 30, 2018 · Updated Aug 5, 2024 · Assigned by mitre