baijiacms Cross-Site Request Forgery Vulnerability

baijiacms is a content management system CMS for e-commerce. A cross-site request forgery vulnerability exists in baijiacms version 3. A remote attacker can add an administrator account with index.php?mod=site&op=edituser&name=manager&do=user to exploit this vulnerability...

CVE-2018-9014

dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdrsn= request...