CVE-2020-18457

Cross Site Request Forgery CSRF vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html...

CVE-2020-18457: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html...

PT-2021-10179

Name of the Vulnerable Software and Affected Versions: bycms version 1.3.0 Description: A Cross Site Request Forgery CSRF issue exists, allowing an attacker to add an admin account via the "admin.php/ucenter/add.html" endpoint. Recommendations: For bycms version 1.3.0, as a temporary workaround,...