Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Cscms Project Subscribe
Filtered by product Cscms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-11527 1 Cscms Project 1 Cscms 2018-06-29 6.8 MEDIUM 8.8 HIGH
An issue was discovered in CScms v4.1. A Cross-site request forgery (CSRF) vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpass_save.