PT-2018-11268

Name of the Vulnerable Software and Affected Versions AKCMS version 6.1 Description An issue was discovered that allows CSRF to add an admin account via the "/index.php?file=account&action=manageaccounts&job=newaccount" API endpoint. Recommendations For AKCMS version 6.1, consider disabling the...

CVE-2018-12582: Cross-Site Request Forgery (CSRF)

An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI...