An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin account via index, /admin.php/Admin/adminadd.html
References
Link | Resource |
---|---|
https://gist.github.com/yinfei6/17bbeece7cf5a8f9c31f7a517d85b247 | Third Party Advisory |
https://gist.github.com/yinfei6/17bbeece7cf5a8f9c31f7a517d85b247 | Third Party Advisory |
Configurations
History
21 Nov 2024, 06:00
Type | Values Removed | Values Added |
---|---|---|
References | () https://gist.github.com/yinfei6/17bbeece7cf5a8f9c31f7a517d85b247 - Third Party Advisory |
Information
Published : 2022-11-23 20:15
Updated : 2024-11-21 06:00
NVD link : CVE-2021-29334
Mitre link : CVE-2021-29334
CVE.ORG link : CVE-2021-29334
JSON object : View
Products Affected
jizhicms
- jizhicms
CWE
CWE-352
Cross-Site Request Forgery (CSRF)