An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin account via index, /admin.php/Admin/adminadd.html
References
Link | Resource |
---|---|
https://gist.github.com/yinfei6/17bbeece7cf5a8f9c31f7a517d85b247 | Third Party Advisory |
Configurations
History
No history.
Information
Published : 2022-11-23 20:15
Updated : 2024-02-28 19:51
NVD link : CVE-2021-29334
Mitre link : CVE-2021-29334
CVE.ORG link : CVE-2021-29334
JSON object : View
Products Affected
jizhicms
- jizhicms
CWE
CWE-352
Cross-Site Request Forgery (CSRF)