CVE-2020-19889

Impact

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=-70 can add a user.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#11
• https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#11