CMS 1.0 vulnerable to CSRF via /admin/doAdminAction.php
CVE-2024-48191

Currently unrated

Key Information:

Vendor
dingfanzu
Vendor
CVE Published:
28 October 2024

Summary

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17

References

https://github.com/xiaoyin0226/cms/tree/main/5/readme.md

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.