cve/2018/CVE-2018-12602.md

CVE-2018-12602

Description

A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.

POC

Reference

• http://packetstormsecurity.com/files/148268/LFCMS-3.7.0-Cross-Site-Request-Forgery.html
• http://packetstormsecurity.com/files/148268/LFCMS-3.7.0-Cross-Site-Request-Forgery.html
• https://www.exploit-db.com/exploits/44918/
• https://www.exploit-db.com/exploits/44918/

Github

No PoCs found on GitHub currently.