PT-2020-13361

Name of the Vulnerable Software and Affected Versions NukeViet version 4.4 Description The issue allows for Cross-Site Request Forgery CSRF attacks, enabling an attacker to add a user account via the "admin/index.php?nv=users&op=user add" URI. This is possible due to a vulnerability in the...