CVE-2019-9549

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935...

CVE-2019-9549: Cross-Site Request Forgery (CSRF)

An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935...

PT-2019-19700

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description An issue was discovered in PopojiCMS, allowing CSRF via the "po-admin/route.php?mod=user&act=addnew" URI. This can be exploited to add a level=1 account. Recommendations For PopojiCMS version 2.0.1, as a...