CVE-2018-12602: lfdycms lfcms – CVSS 8.8 · Watchpost

← All vulnerabilities

CVE-2018-12602

高危 8.8CVE-2018-12602 · Published 25/06/2018 · updated 17/06/2026

要点

CVE-2018-12602 是影响 lfcms (lfdycms) 的高危 (CVSS 8.8)漏洞。
未来 30 天内被利用的概率（EPSS）：2.9%，高于 87.2% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
lfcms lfdycms	`= 3.7.0`	No fix yet

Description

A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.

References

packetstormsecurity.com/files/148268/LFCMS-3.7.0-Cross-Site-Request-Forgery.html · Exploit
iwantacve.cn/index.php/archives/43 · Exploit
cnblogs.com/v1vvwv/p/9203740.html · Exploit
exploit-db.com/exploits/44918 · Exploit

lfcms 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free