Cross site request forgery (csrf)

2022-11-2320:15:00

PRIOn knowledge base

www.prio-n.com

jizhi cms

csrf vulnerability

admin account

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.5%

An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin account via index, /admin.php/Admin/adminadd.html

CPENameOperatorVersion
jizhicmseq1.9.4

CPE	Name	Operator	Version
	jizhicms	eq	1.9.4

References

gist.github.com/yinfei6/17bbeece7cf5a8f9c31f7a517d85b247