Cross site request forgery (csrf)

Cross Site Request Forgery CSRF exists in Photography CMS 1.0 via clients/resources/ajax/ajaxnewadmin.php, as demonstrated by adding an admin account...

CVE-2018-5969

Cross Site Request Forgery CSRF exists in Photography CMS 1.0 via clients/resources/ajax/ajaxnewadmin.php, as demonstrated by adding an admin account...

CVE-2018-5969

CVE-2018-5969 : Concrete details from connected docs show a CSRF vulnerability in Photography CMS 1.0. The flaw resides in the endpoint clients/resources/ajax/ajax_new_admin.php, enabling an attacker to perform actions (notably adding an admin account) without user consent. Multiple sources (NVD ...