DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.

Published Jul 5, 2018 · Updated Aug 5, 2024 · Assigned by mitre