← All advisories

High severity8.8NVD Advisory· Published Apr 17, 2018· Updated Jun 17, 2026

CVE-2018-10185

CVE-2018-10185

Description

An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushState call.

Affected products

3

TuziCMS/TuziCMS2 versions
cpe:2.3:a:tuzicms:tuzicms:2.0.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tuzicms:tuzicms:2.0.6:*:*:*:*:*:*:*
- (no CPE)range: =2.0.6
yeyinshi/TuziCMSllm-fuzzy
Range: =2.0.6

Patches

Vulnerability mechanics

References

1

github.com/yeyinshi/tuzicms/issues/1nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.