Design/Logic Flaw

2018-04-2019:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account.

CPENameOperatorVersion
baijiacmseq3.0

CPE	Name	Operator	Version
	baijiacms	eq	3.0

References

crayon-xin.github.io/2018/04/20/baijiacmsV3-CSRF-add-admin/