CVE-2019-10888: Cross-Site Request Forgery (CSRF)

A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html...

PT-2019-12080

Name of the Vulnerable Software and Affected Versions UKcms version 1.1.10 Description A CSRF issue was discovered that can add an admin user. The issue is related to the "admin.php/admin/role/add.html" API endpoint. Recommendations For UKcms version 1.1.10, update to a newer version that contain...

CVE-2018-20015: Cross-Site Request Forgery (CSRF)

YzmCMS v5.2 has admin/role/add.html CSRF...

PT-2018-15237

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.2 Description The issue affects the admin/role/add.html endpoint, where a CSRF vulnerability is present. Recommendations For YzmCMS version 5.2, consider implementing CSRF protection measures, such as token-based validation, t...