CVE-2019-1010112: Phpcoo Oecms

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery (CSRF). The impact is: The victim clicks on adding an administrator account. The component is: admincp.php. The attack vector is: network connectivity. The fixed version is: v4.3.

Affected products

• Phpcoo Oecms: from 4.3; version 4.3.r60321 only

Published 2019-07-18. Last modified 2026-06-17.