PT-2024-32011 · Unknown · Dingfanzu Cms

Name of the Vulnerable Software and Affected Versions: dingfanzu CMS version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF that can be exploited via the "/admin/doAdminAction.php?act=addCate" API endpoint. This allows an attacker to perform unauthorized actions on the...