cve/2020/CVE-2020-18418.md

### [CVE-2020-18418](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18418)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.

### POC

#### Reference
- https://github.com/GodEpic/Vulnerability-detection/blob/master/feifeicms/FeiFeiCMS_4.1_csrf.doc
- https://github.com/GodEpic/Vulnerability-detection/blob/master/feifeicms/FeiFeiCMS_4.1_csrf.doc
- https://github.com/GodEpic/Vulnerability-detection/blob/master/feifeicms/poc
- https://github.com/GodEpic/Vulnerability-detection/blob/master/feifeicms/poc

#### Github
No PoCs found on GitHub currently.