CVE-2019-9040 - S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332

HIGH

S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332

Published Feb 23, 2019

8.8

HIGH

CVSS 3.0

EPSS 0.57%

S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
http://www.iwantacve.cn/index.php/archives/113/		x_refsource_MISCBroken Link

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 23, 2019

Updated Sep 16, 2024

Reserved Feb 23, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a