CVE-2018-18436

JTBCPHP 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI...

CVE-2018-18436

CVE-2018-18436 affects JTBC(PHP) 3.0. The vulnerability is a CSRF flaw in the account-creation workflow exposed via console/account/manage.php?type=action&action=add, enabling unauthorized account creation. Root cause: CSRF in the account create action; impact includes confidentiality, integrity,...