2018-06-30 14:00:00
mitre
PUBLISHED
phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid csrf_token_value field.