Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-16732

\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.