Hongcms · Hongcms · CVE-2018-10265
Name of the Vulnerable Software and Affected Versions:
HongCMS version 3.0.0
Description:
An issue was discovered that allows for a CSRF vulnerability, enabling the addition of an administrator account via the "admin/index.php/users/save" URI.
Recommendations:
For HongCMS version 3.0.0, update to a version that includes a fix for this issue, as using the `admin/index.php/users/save` URI can lead to unauthorized administrator account creation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.