23 Sep 2019

Vulnérabilité CVE-2019-16706 CVE Vulnerability

kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php. (CVSS:6.8) (Last Update:2019-09-23)

Vulnerability Details :

kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.
Publish Date : 2019-09-23 Last Update Date : 2019-09-23

CVSS Score	6.8
Confidentiality Impact	Partial(There is considerable informational disclosure.)
Integrity Impact	Partial(Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited.)
Availability Impact	Partial(There is reduced performance or interruptions in resource availability.)
Access Complexity	Medium(The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication	Not required(Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	CSRF
CWE ID	352

#	Product Type	Vendor	Product	Version	Update	Edition	Language
1	Application	Kkcms Project	Kkcms	1.3				Version Details Vulnerabilities

Vendor	Product	Vulnerable Versions
Kkcms Project	Kkcms	1

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)