PT-2019-11960

Name of the Vulnerable Software and Affected Versions HYBBS version 2.2 Description An issue was discovered that allows adding an administrator account due to a CSRF vulnerability in the "/?admin/user.html" API endpoint. Recommendations For HYBBS version 2.2, as a temporary workaround, consider...

CVE-2019-10644: Cross-Site Request Forgery (CSRF)

An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account...

CVE-2018-18215

In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account...

Cross site request forgery (csrf)

In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account...

CVE-2018-18215

In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account...

CVE-2018-18215: Cross-Site Request Forgery (CSRF)

In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account...

PT-2018-14373

Name of the Vulnerable Software and Affected Versions youke365 version 1.1.5 Description The issue concerns a CSRF vulnerability in the admin/user.html endpoint. This vulnerability can be exploited to add a user account. Recommendations For youke365 version 1.1.5, consider implementing proper CSR...