CVE-2024-48291

The dingfanzu CMS version 1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw. The vulnerability is located in the /admin/doAdminAction.php endpoint, specifically when the act parameter is set to editAdmin and the id parameter is set to 17. This flaw allows an attacker to perform unauth...

CVE-2024-48291: Cross-Site Request Forgery (CSRF)

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=editAdmin&id=17...