CVE-2020-18460

Cross Site Request Forgery CSRF vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin=content...

CVE-2020-18460

creationtimestamp| type| source ---|---|--- 2021-08-12 22:40:10+00:00| seen| https://t.me/cibsecurity/27263...

CVE-2020-18460

711cms v1.0.7 is vulnerable to Cross Site Request Forgery (CSRF). The issue allows an attacker to cause the application to add an admin account via the endpoint admin.php?c=Admin&m=content. The provided connected records confirm the affected product/version and the vulnerable operation, with CSRF...