An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI.

Published Jun 19, 2018 · Updated Aug 5, 2024 · Assigned by mitre