Security Advisory

CVE-2019-8347

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-02-15 15:00:00

Last updated 2024-08-04 21:17:30

Assigner mitre

State PUBLISHED

BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=user URI.