PT-2019-18653

Name of the Vulnerable Software and Affected Versions PbootCMS version 1.3.6 Description A CSRF issue was discovered that can lead to the deletion of users. This occurs via the "admin.php/User/del/ucode/" API endpoint. Recommendations For PbootCMS version 1.3.6, consider disabling access to the...

CVE-2019-7570: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...