cve/CVE-2024-50966.md at main - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-11-28 18:48:49 +00:00

0xMarcio cb00e1339f Update CVE list 2025-09-29 21:09

2025-09-29 21:09:30 +02:00

705 B

Raw Permalink Blame History

CVE-2024-50966

Description

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.

POC

Reference

https://github.com/evenomn/YangYiWen/tree/main/11

Github

No PoCs found on GitHub currently.