CVE-2019-6249

An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/index.php?load=admins&act=edit_info&act_type=add.

• CWE-352

• http://www.iwantacve.cn/index.php/archives/109/Third Party Advisory
• https://www.exploit-db.com/exploits/46149/Exploit, Third Party Advisory, VDB Entry
• http://www.iwantacve.cn/index.php/archives/109/Third Party Advisory
• https://www.exploit-db.com/exploits/46149/Exploit, Third Party Advisory, VDB Entry

Published

Jan 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6243Frog CMS 0.9.5 allows XSS via the forgot password page (aka …
• CVE-2019-6244An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlb…
• CVE-2019-6245An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as …8.8
• CVE-2019-6246An issue was discovered in SVG++ (aka svgpp) 1.2.3. After ca…
• CVE-2019-6247An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as …
• CVE-2019-6248PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Sc…
• CVE-2019-6250A pointer overflow, with code execution, was discovered in Z…
• CVE-2019-6251WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnera…
• CVE-2019-6256A Denial of Service issue was discovered in the LIVE555 Stre…
• CVE-2019-6257A Server Side Request Forgery (SSRF) vulnerability in elFind…7.7
• CVE-2019-6258D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and o…9.8
• CVE-2019-6259An issue was discovered in idreamsoft iCMS V7.0.13. There is…