| Package | Affected versions | Patched versions |
|---|---|---|
| easycms | = 1.6 |
A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username=***&password=***.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free