CVE-2021-29334: Cross-Site Request Forgery (CSRF)

An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin account via index, /admin.php/Admin/adminadd.html...

CVE-2019-17593: Cross-Site Request Forgery (CSRF)

JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator...

PT-2019-15218

Name of the Vulnerable Software and Affected Versions JIZHICMS version 1.5.1 Description The issue allows for a CSRF attack on the admin.php/Admin/adminadd.html endpoint to add an administrator. Recommendations For JIZHICMS version 1.5.1, consider implementing CSRF protection measures to prevent...