DamiCMS Cross-Site Request Forgery Vulnerability

DamiCMS is a content management system CMS for quickly building websites. There is a security vulnerability in DamiCMS v6.0.6 that allows you to add an administrative account via admin.php?s=/Admin/doadd...

PT-2021-10180

Name of the Vulnerable Software and Affected Versions: DamiCMS version 6.0.6 Description: A Cross Site Request Forgery CSRF issue exists, allowing the addition of an admin account via the "admin.php?s=/Admin/doadd" endpoint. This can be exploited to gain unauthorized access. Recommendations: For...

PT-2018-11548

Name of the Vulnerable Software and Affected Versions DamiCMS versions 6.0.0 through 6.1.0 Description The issue allows for a CSRF attack via the "admin.php?s=/Admin/doadd" endpoint to add an administrator account. Recommendations For DamiCMS versions 6.0.0 through 6.1.0, consider restricting...

DamiCMS Cross-Site Request Forgery Vulnerability

DamiCMS is a content management system CMS for building websites quickly. A cross-site request forgery vulnerability exists in DamiCMS version 6.0.0. A remote attacker can exploit this vulnerability to add an administrator account with the help of the admin.php?s=/Admin/doadd URL...