CVE-2024-48341

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...

CVE-2024-48341

The dingfanzu CMS V1.0 (a PHP-based takeaway ordering website) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/doAdminAction.php?act=addShop component, which lacks sufficient protection against forged requests. An attacker could potentially trigger unauthorize...

CVE-2024-48341

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...