PT-2018-10237

Name of the Vulnerable Software and Affected Versions SDcms version 1.5 Description A cross-site request forgery CSRF issue allows remote attackers to add administrator accounts. This is possible via the "/WWW//app/admin/controller/admincontroller.php" endpoint with parameters such as m=admin,...