CVE-2018-10249

baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account.

Date published : 2018-04-20

https://crayon-xin.github.io/2018/04/20/baijiacmsV3-CSRF-add-admin/