CVE-2020-9341

CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI...

Cross site request forgery (csrf)

/console/account/manage.php?type=action&action=add in JTBC v3.0C has CSRF for adding an administrator account...

CVE-2018-20188

FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account...

CVE-2018-15851

An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add...

Verizon Fios Router MI424WR-GEN3I - CSRF Vulnerability

No description provided by source. Exploit Title: Verizon Fios Router CSRF Admin Shell Date: Discovered and reported January 2013 Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators Software: Verizon FIOS Router - Firmware 40.19.36 http://verizon.com CVE: CVE-2013-01...

Tribq CMS 5.2.7 - Adding/Editing New Administrator Account CSRF

No description provided by source. Exploit Title: Tribq CMS CSRF - Adding/Editing new administrator account Date: 2013 8 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...

Apprain 3.0.2 Cross Site Request Forgery

Exploit Title: Apprain CMF / CSRF ADD/DELETE administrator's account Date: 2013 29 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://www.apprain.com/ Tested on: Linux & Windows, PHP 5.2.9 Affected...

Tribq CMS 5.2.7 - Cross-Site Request Forgery (Adding/Editing New Administrator Account)

Exploit Title: Tribq CMS CSRF - Adding/Editing new administrator account Date: 2013 8 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://sourceforge.net/projects/tribiq/ Tested on: Linux & Windows, PH...

Tribq CMS 5.2.7 Cross Site Request Forgery

Exploit Title: Tribq CMS CSRF - Adding/Editing new administrator account Date: 2013 8 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://sourceforge.net/projects/tribiq/ Tested on: Linux & Windows, PH...

Passenger passenger witkey system CSRF+getshell-a vulnerability warning-the black bar safety net

Registered members 2, The http://127.0.0.1/index.php?do=user&view=message&msgtype=write 3, is sent to the admin, the following is a csrf, the purpose is to add an administrator account kppw password kppwkppw script src=http://127.0.0.1/control/admin/index. php?...