medium5.3
CVE-2018-12990
phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid csrf_token_value field.
Impact
phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid csrf_token_value field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpwcms | Phpwcms | Version 1.8.9 |