CVE-2019-10888: Cross-Site Request Forgery (CSRF)

A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html...

CVE-2018-20015: Cross-Site Request Forgery (CSRF)

YzmCMS v5.2 has admin/role/add.html CSRF...

PT-2018-15237

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.2 Description The issue affects the admin/role/add.html endpoint, where a CSRF vulnerability is present. Recommendations For YzmCMS version 5.2, consider implementing CSRF protection measures, such as token-based validation, t...