xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account.

Published Jul 24, 2018 · Updated Sep 16, 2024 · Assigned by mitre