CVE-2023-43278: CSRF
A Cross-Site Request Forgery (CSRF) in adminmanager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this CSRF vulnerability in Seacms?
The vulnerability ID for this CSRF vulnerability in Seacms is CVE-2023-43278.
What is the severity level of CVE-2023-43278?
The severity level of CVE-2023-43278 is high (8.8).
How does the CSRF vulnerability in Seacms up to v12.8 occur?
The CSRF vulnerability in Seacms up to v12.8 occurs in the admin_manager.php file and allows attackers to arbitrarily add an admin account.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-43278?
The Common Weakness Enumeration (CWE) ID associated with CVE-2023-43278 is CWE-352.
Are there any references available for more information about this CSRF vulnerability in Seacms?
Yes, you can find more information about this CSRF vulnerability in Seacms at the following references: [http://seacms.com](http://seacms.com), [https://blog.csdn.net/sugaryzheng/article/details/133283101?spm=1001.2014.3001.5501](https://blog.csdn.net/sugaryzheng/article/details/133283101?spm=1001.2014.3001.5501), [https://www.seacms.net/](https://www.seacms.net/).