Security Advisory
CVE-2020-19886
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu.