CVE-2019-10644
HYBBS 2.2 has a CSRF vulnerability on the /?admin/user.html page that can add an administrator account. The connected sources confirm the affected software/version and the vulnerable endpoint; no exploit details or fixes are provided in the documents. No root-cause or remediation specifics are st...