← All advisories

High severity8.8NVD Advisory· Published Mar 7, 2019· Updated Jun 17, 2026

CVE-2018-18449

CVE-2018-18449

Description

EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Empire CMS/Empire CMSllm-fuzzy
Range: 7.5

Patches

Vulnerability mechanics

References

1

github.com/w3irdo001/demo/blob/master/3.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.