CVE-2019-17369 · Vexday

CVE-2019-17369

EPSS 0.5%

OTCMS v3.85 has CSRF in the admin/member_deal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin.

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/Gitaddy/vluns/blob/master/Otcms-CSRF.md