PT-2019-9478

Name of the Vulnerable Software and Affected Versions JTBC version 3.0 Description The issue concerns a CSRF flaw in the "/console/account/manage.php" endpoint, specifically when the "type" parameter is set to "action" and the "action" parameter is set to "add". This allows for the addition of an...

CVE-2018-17429: Cross-Site Request Forgery (CSRF)

/console/account/manage.php?type=action&action=add in JTBC v3.0C has CSRF for adding an administrator account...

PT-2018-14461

Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0 Description The issue allows for CSRF when creating an account through the "console/account/manage.php?type=action&action=add" API endpoint. This can be exploited to perform unauthorized actions. Recommendations For JTBCPHP...