CVE-2020-22334: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/adminadmin.php...

CVE-2018-10266

BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/adminadmin.php?nav=listadminuser&adminpnav=user URI...

Cross site request forgery (csrf)

BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/adminadmin.php?nav=listadminuser&adminpnav=user URI...

CVE-2018-10266

BEESCMS 4.0 is affected by a CSRF flaw that allows an attacker to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI. The root cause is cross-site request forgery, enabling privilege elevation by creating a new admin account without authentication....

CVE-2018-10266: Cross-Site Request Forgery (CSRF)

BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/adminadmin.php?nav=listadminuser&adminpnav=user URI...