UCMS Cross-Site Request Forgery Vulnerability

UCMS is a content management system written in PHP. A cross-site request forgery vulnerability exists in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to create an administrator account with the help of ?do=useraddpost...