NetSight
high8.8

CVE-2018-10295

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.

Impact

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.

Affected products

VendorProductAffected versions
Chemcms ProjectChemcms
Version 1.0.6

Weakness classification

References