DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=-70 can add a user.

Published Aug 24, 2020 · Updated Aug 4, 2024 · Assigned by mitre