high8.8Public exploit code
CVE-2019-6249
An issue was discovered in HuCart v5.7.4.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hucart CMS 5.7.4 - Cross-Site Request Forgery (Add Administrator Account)2019-01-14 · webapps · php
Impact
An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/index.php?load=admins&act=edit_info&act_type=add.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hucart | Hucart | Version 5.7.4 |