2018-07-24 16:00:00
mitre
PUBLISHED
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account.