← All advisories

High severity8.8NVD Advisory· Published Apr 11, 2019· Updated Jun 17, 2026

CVE-2019-11078

CVE-2019-11078

Description

MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI.

Affected products

2

Mkcms Project/Mkcms
cpe:2.3:a:mkcms_project:mkcms:5.0:*:*:*:*:*:*:*
MKCMS/MKCMSllm-fuzzy
Range: = 5.0

Patches

Vulnerability mechanics

References

1

www.iwantacve.cn/index.php/archives/193/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.