Information Disclosure Vulnerability in phpwcms 1.8.9 via Invalid CSRF Token Value Field

CVE-2018-12990 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid csrf_token_value field.

Learn more about our Cms Pen Testing.