CVE-2018-16431

Impact

admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://hpdoger.me/2018/08/23/Csrf%20in%20YFCMF%203.0/
• http://hpdoger.me/2018/08/23/Csrf%20in%20YFCMF%203.0/