PT-2018-10242

Name of the Vulnerable Software and Affected Versions PbootCMS version 1.0.7 Description A cross-site request forgery CSRF issue allows remote attackers to add administrator accounts. This is possible due to a vulnerability in the RoleController.php file, specifically when accessing the...

CVE-2018-11018: Cross-Site Request Forgery (CSRF)

An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery CSRF vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts via admin.php/role/add.html...