PT-2018-12278

Name of the Vulnerable Software and Affected Versions waimai Super Cms version 20150505 Description The issue allows for the addition of an admin account via the admin.php?m=Member&a=adminadd API endpoint, due to a CSRF vulnerability. Recommendations For waimai Super Cms version 20150505, as a...

CVE-2018-14014: Cross-Site Request Forgery (CSRF)

In waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via admin.php?m=Member&a=adminadd...