CVE-2015-6545

CVE-2015-6545: A CSRF flaw in Cerb (Webgroup Media LLC) affects the ajax.php endpoint, enabling an authenticated attacker to add an administrator account via the saveWorkerPeek action. Affected version(s): Cerb 7.0.3 and likely earlier; fixed in Cerb 7.0.4. Impact: unauthorized creation of admin ...