CVE-2018-25200

OOP CMS BLOG 1.0 is affected by a cross-site request forgery via addUser.php that allows unauthenticated creation of an administrative user by posting userName, password, email, and role parameters. Root cause is CSRF enabling admin account creation without authentication. Impact: potential unaut...