Schben Adive Privilege Control Vulnerability

Schben Adive is a PHP-based web development framework . A security vulnerability exists in the Internal/Views/addUsers.php file in Schben Adive version 2.0.7. A remote attacker can exploit this vulnerability to create administrator privileges with admin/user/add...

CVE-2019-14347

Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users editor or developer to create an administrator account via admin/user/add, as demonstrated by a Python PoC script...

PT-2019-13626 · Unknown · Schben Adive

Name of the Vulnerable Software and Affected Versions: Schben Adive version 2.0.7 Description: The issue allows remote unprivileged users, such as editors or developers, to create an administrator account. This can be achieved via the admin/user/add endpoint, as demonstrated by a Python...

Cross site request forgery (csrf)

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

OneThink Cross-Site Request Forgery Vulnerability (CNVD-2018-14976)

Onethink is a ThinkPHP-based content management framework for web development . A cross-site request forgery vulnerability exists in the admin.php?s=/User/add.html page in OneThink version 1.1. A remote attacker can exploit this vulnerability to add users...

QuickAppsCMS Cross-Site Request Forgery Vulnerability

QuickAppsCMS is an open source content management system CMS developed using the MVC framework. A cross-site request forgery vulnerability exists in admin/user/manage/add in QuickAppsCMS version 2.0.0-beta2. A remote attacker can exploit this vulnerability to create an account with administrator...

Cross-Site Request Forgery Vulnerability in yiqicms

Yiqicms is a SEO-based marketing enterprise website system, using PHP+Mysql open source building system. yiqicms background add admin admin/user-add.php at the existence of CSRF vulnerability , through the implantation of csrf form way , you can add the administrator account...