PT-2018-13501

Name of the Vulnerable Software and Affected Versions EmpireCMS version 7.0 Description A CSRF issue allows adding administrators via the "upload/e/admin/user/AddUser.php?enews=AddUser" endpoint. This can be exploited to add new administrators without proper authorization. Recommendations For...