CVE-2018-10295: Cross-Site Request Forgery (CSRF)

ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account...

PT-2018-9805

Name of the Vulnerable Software and Affected Versions: ChemCMS version 1.0.6 Description: The issue allows for CSRF by utilizing the "public/admin/user/addpost.html" endpoint to add an administrator account. Recommendations: For ChemCMS version 1.0.6, consider implementing proper CSRF protection...