← All advisories

Medium severity5.3OSV Advisory· Published Jun 30, 2018· Updated Jun 17, 2026

CVE-2018-12990

CVE-2018-12990

Description

phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid csrf_token_value field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Slackero/PhpwcmsOSV
Range: phpwcms-1.6.529, phpwcms-1.6.531, phpwcms-1.7.0, …
Phpwcms/Phpwcms2 versions
cpe:2.3:a:phpwcms:phpwcms:1.8.9:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpwcms:phpwcms:1.8.9:*:*:*:*:*:*:*
- (no CPE)range: =1.8.9

Patches

Vulnerability mechanics

References

1

3xpl01tc0d3r.blogspot.com/2018/06/information-disclosure-internal-path.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.