CVE-2018-13031

DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.

• CWE-352

• https://github.com/AutismJH/damicms/issues/6
• https://www.cnblogs.com/v1vvwv/p/9248562.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44960/Exploit, Third Party Advisory, VDB Entry
• https://github.com/AutismJH/damicms/issues/6
• https://www.cnblogs.com/v1vvwv/p/9248562.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44960/Exploit, Third Party Advisory, VDB Entry

Published

Jul 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13023System command injection vulnerability in wifi_access in Xia…
• CVE-2018-13024Metinfo v6.0.0 allows remote attackers to write code into a …
• CVE-2018-13025protected/apps/admin/controller/photoController.php in YXcms…
• CVE-2018-13026An issue was discovered in gpmf-parser 1.1.2. There is a hea…
• CVE-2018-1303A specially crafted HTTP request header could have crashed t…
• CVE-2018-13030An issue was discovered in jpeg-compressor 0.1. The build_hu…
• CVE-2018-13032ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add s…
• CVE-2018-13033The Binary File Descriptor (BFD) library (aka libbfd), as di…
• CVE-2018-13034Directory traversal in Jester web framework 0.2.0 allows rem…
• CVE-2018-13037An issue was discovered in jpeg-compressor 0.1. The bmp_load…
• CVE-2018-13038OpenSID 18.06-pasca has an Unrestricted File Upload vulnerab…
• CVE-2018-13039OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS)…