CVE-2018-15177: Cross-Site Request Forgery (CSRF)

In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account...

PT-2018-12925

Name of the Vulnerable Software and Affected Versions Gxlcms version 2.0 Description The issue allows for a CSRF attack, which can be used to add an administrator account through the news/index.php?s=Admin-Admin-Insert endpoint. Recommendations For Gxlcms version 2.0, consider implementing CSRF...