CVE-2018-13444

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/admin_manager.php?action=save&id=2.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Jul 8, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-134458.8An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/admin_manager.php?action=add.CVE-2018-134467.0An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runtiCVE-2018-134479.8SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands CVE-2018-134489.8SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands CVE-2018-134499.8SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands CVE-2018-13458.8NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack.CVE-2018-134509.8SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands CVE-2018-134575.5qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local deniaCVE-2018-134585.5qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local deniaCVE-2018-13467.5Addresses denial of service attack to eDirectory versions prior to 9.1.CVE-2018-134627.5The mintToken function of a smart contract implementation for MoonToken, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-134637.5The mintToken function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum token, has an integer overflow that allows t
CVE-2018-13444: High severity, CVSS 8.8 | Vulnix