Skip to content
OpenAdvisories

Vendor

Zsoft

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php

    OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters inclu…