CVE-2018-19327: Cross-Site Request Forgery (CSRF)

An issue was discovered in JTBCPHP 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF...

PT-2018-14917

Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0.1.7 Description An issue was discovered that allows CSRF in the "aboutus/manage.php" endpoint, specifically when the "type" parameter is set to "action" and the "action" parameter is set to "add". Recommendations For JTBCPH...