CVE-2024-46485

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=addCate...

CVE-2024-46485

Affected software: dingfanzu CMS 1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be triggered via the admin endpoint /admin/doAdminAction.php?act=addCate. Root cause: CSRF vulnerability in the action endpoint allowing unauthorized actions if a user is authenticated. Impact:...