An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account.

Published Mar 30, 2019 · Updated Aug 4, 2024 · Assigned by mitre