PT-2021-10180

Name of the Vulnerable Software and Affected Versions: DamiCMS version 6.0.6 Description: A Cross Site Request Forgery CSRF issue exists, allowing the addition of an admin account via the "admin.php?s=/Admin/doadd" endpoint. This can be exploited to gain unauthorized access. Recommendations: For...

PT-2018-11548

Name of the Vulnerable Software and Affected Versions DamiCMS versions 6.0.0 through 6.1.0 Description The issue allows for a CSRF attack via the "admin.php?s=/Admin/doadd" endpoint to add an administrator account. Recommendations For DamiCMS versions 6.0.0 through 6.1.0, consider restricting...