high8.8
CVE-2019-9688
sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.
Impact
sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sftnow | Sftnow | through 2018-12-29 |