Vendor
Zsoft
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.3
OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php
OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious POST requests. Attackers can submit forms to the addUser.php endpoint with parameters inclu…