NetSight
high8.8

CVE-2018-10249

baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account.

Impact

baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account.

Affected products

VendorProductAffected versions
Baijiacms ProjectBaijiacms
Version 3.0

Weakness classification

References