CVE-2018-15845

There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-08-25

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Gleez Cms (Gleezcms)

References

• https://github.com/gleez/cms/issues/800
• https://www.exploit-db.com/exploits/45258/