PT-2014-2628

Name of the Vulnerable Software and Affected Versions Umisoft UMI.CMS versions prior to 2.9 build 21905 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to...

CVE-2013-2754: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/...