VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 9, 2019· Updated Jun 17, 2026

CVE-2019-17369

CVE-2019-17369

Description

OTCMS v3.85 has CSRF in the admin/member_deal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin.

Affected products

3
  • Otcms/Otcmsllm-fuzzy2 versions
    = 3.85+ 1 more
    • (no CPE)range: = 3.85
    • cpe:2.3:a:otcms:otcms:3.85:*:*:*:*:*:*:*
  • OTCMS/OTCMSdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.