Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Lfdycms Subscribe
Filtered by product Lfcms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-12602 1 Lfdycms 1 Lfcms 2018-08-27 6.8 MEDIUM 8.8 HIGH
A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.
CVE-2018-12603 1 Lfdycms 1 Lfcms 2018-08-27 6.8 MEDIUM 8.8 HIGH
Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for requests that add administrator users via the s parameter, a related issue to CVE-2018-12114.