CVE-2018-17366

https://notcve.org/view.php?id=CVE-2018-17366

An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. Se ha descubierto un problema en MCMS 4.6.5. Existe una vulnerabilidad Cross-Site Request Forgery (CSRF) que puede añadir una cuenta administrador a través de /index.php/admin/admin_manage/add.html. • https://gitee.com/mingSoft/MCMS/issues/IM1DA • CWE-352: Cross-Site Request Forgery (CSRF) •