Lfdycms Lfcms
2 CVEs affecting Lfdycms Lfcms. Latest disclosed: 2018-06-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-12603 | High | 8.8 | 2018-06-25 | Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for reque… |
CVE-2018-12602 | High | 8.8 | 2018-06-25 | A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily. |