← All advisories

High severity8.8NVD Advisory· Published Sep 4, 2018· Updated Jun 17, 2026

CVE-2018-16431

CVE-2018-16431

Description

admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.

Affected products

2

60xiong/Yfcmfinferred
Range: = 3.0
YFCMF/YFCMFllm-fuzzy
Range: =3.0

Patches

Vulnerability mechanics

References

1

hpdoger.me/2018/08/23/Csrf%20in%20YFCMF%203.0/nvdExploitThird Party AdvisoryURL Repurposed

News mentions

0

No linked articles in our index yet.