← All advisories

High severity8.8NVD Advisory· Published Sep 4, 2018· Updated Jun 17, 2026

CVE-2018-16431

CVE-2018-16431

Description

admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.

Affected products

3

YFCMF/YFCMFllm-fuzzy2 versions
=3.0+ 1 more
- (no CPE)range: =3.0
- cpe:2.3:a:yfcmf:yfcmf:3.0:*:*:*:*:*:*:*
60xiong/Yfcmfinferred
Range: = 3.0

Patches

Vulnerability mechanics

References

1

hpdoger.me/2018/08/23/Csrf%20in%20YFCMF%203.0/nvdExploitThird Party AdvisoryURL Repurposed

News mentions

0

No linked articles in our index yet.