CVE-2019-16706

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Sep 23, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-167076.5Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.CVE-2019-167086.5ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.CVE-2019-167096.5ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.CVE-2019-16716.1A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attaCVE-2019-167106.5ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.CVE-2019-167116.5ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.CVE-2019-167126.5ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.CVE-2019-167136.5ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.CVE-2019-167147.5In the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack mCVE-2019-167166.6OX App Suite through 7.10.2 has Incorrect Access Control.CVE-2019-167176.1OX App Suite through 7.10.2 has XSS.CVE-2019-167187.8In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file,
CVE-2019-16706: High severity, CVSS 8.8 | Vulnix