Cross site request forgery (csrf)

2018-07-2416:29:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.6%

xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account.

CPENameOperatorVersion
xyhcmseq3.5

CPE	Name	Operator	Version
	xyhcms	eq	3.5

References

github.com/maoGod/xyhcms/issues/1