CVE-2023-43278

A Cross-Site Request Forgery CSRF in adminmanager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account...

CVE-2023-43278: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in adminmanager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account...

CVE-2022-46074: Cross-Site Request Forgery (CSRF)

Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery CSRF. An unauthenticated user can add an admin account due to missing CSRF protection...

CVE-2021-29334: Cross-Site Request Forgery (CSRF)

An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin account via index, /admin.php/Admin/adminadd.html...

ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability in ThinkCMF, which can add an admin account...

PT-2021-10386

Name of the Vulnerable Software and Affected Versions: Eyoucms version 1.3.6 Description: A Cross Site Request Forgery CSRF issue exists, allowing an attacker to add an admin account via the /login.php?m=admin&c=Admin&a=admin add&lang=cn API endpoint. This can be exploited by manipulating the m, ...

PT-2021-11583

Name of the Vulnerable Software and Affected Versions: SeaCMS version 10.7 Description: A Cross Site Request Forgery CSRF issue exists in the admin manager.php file, which could allow a malicious user to add an admin account. This could potentially lead to unauthorized access and control of the...

CVE-2020-28846: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...

CVE-2020-18460: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content...

PT-2021-10179

Name of the Vulnerable Software and Affected Versions: bycms version 1.3.0 Description: A Cross Site Request Forgery CSRF issue exists, allowing an attacker to add an admin account via the "admin.php/ucenter/add.html" endpoint. Recommendations: For bycms version 1.3.0, as a temporary workaround,...

CVE-2020-18458: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd...

CVE-2020-18457: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html...

CVE-2020-18129: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...

PT-2019-7022

Name of the Vulnerable Software and Affected Versions Windu CMS version 2.2 Description The issue allows for a Cross-Site Request Forgery CSRF attack via the "admin/users/?mn=admin.message.error" endpoint to add an admin account. Recommendations For Windu CMS version 2.2, as a temporary workaroun...

CVE-2019-9688

sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=addpost CSRF to add an admin account...

PT-2019-19798

Name of the Vulnerable Software and Affected Versions sftnow versions prior to 2018-12-29 Description The issue allows for a CSRF attack via the "index.php?g=Admin&m=User&a=add post" endpoint to add an admin account. Recommendations For versions prior to 2018-12-29, update to a version released...

CVE-2018-16380: Cross-Site Request Forgery (CSRF)

An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account...

BageCMS Cross-Site Request Forgery Vulnerability

BageCMS is a cross-platform content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in the index.php?r=admini/admin/create URL in BageCMS version 3.1.3. A remote attacker can exploit the vulnerability to add a backend administrator account...

CVE-2018-14068: Cross-Site Request Forgery (CSRF)

An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add an admin account via admin.php?m=Admin&c=manager&a=add...

PT-2018-10617

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.20180210 Description A CSRF issue was found in the "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" API endpoint, allowing an attacker to add an admin account. Recommendations For PublicCMS version...