PT-2020-20181

Name of the Vulnerable Software and Affected Versions School Management Software PHP/mySQL through 2019-03-14 Description The issue allows an attacker to add an administrative user via a CSRF attack on the office admin/?action=addadmin endpoint. Recommendations For School Management Software...