Cross site request forgery (csrf)

2018-09-0400:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.0%

admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.

CPENameOperatorVersion
yfcmfeq3.0

CPE	Name	Operator	Version
	yfcmf	eq	3.0

References

hpdoger.me/2018/08/23/Csrf%20in%20YFCMF%203.0/