dingfanzu security vulnerabilities

dingfanzu is a php based takeaway ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version V1.0, which originates from the /admin/doAdminAction.php?act=addAdmin component that contains a cross-site request forgery vulnerability...

PT-2020-20181

Name of the Vulnerable Software and Affected Versions School Management Software PHP/mySQL through 2019-03-14 Description The issue allows an attacker to add an administrative user via a CSRF attack on the office admin/?action=addadmin endpoint. Recommendations For School Management Software...