CVE-2019-17369 · Vexday

CVE-2019-17369

EPSS 0.5%

OTCMS v3.85 has CSRF in the admin/member_deal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin.

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/Gitaddy/vluns/blob/master/Otcms-CSRF.md