CVE-2019-8347

BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/adminmember.php?action=add&nav=addwebuser&adminpnav=user URI...

Cross site request forgery (csrf)

BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/adminmember.php?action=add&nav=addwebuser&adminpnav=user URI...

CVE-2019-8347

CVE-2019-8347 : BEESCMS 4.0 contains a CSRF vulnerability that enables an attacker to add arbitrary VIP accounts through the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=user URI. The connected sources confirm the issue as a CSRF flaw, enabling account creation without proper us...