PT-2019-14793

Name of the Vulnerable Software and Affected Versions NoneCMS version 1.3 Description The issue concerns a CSRF flaw in the public/index.php/admin/admin/dele.html endpoint, which can be exploited to delete the admin user. Recommendations For NoneCMS version 1.3, as a temporary workaround, conside...

CVE-2019-16721: Cross-Site Request Forgery (CSRF)

NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the admin user...