CVE-2012-6518

Name of the Vulnerable Software and Affected Versions DiY-CMS version 1.0

Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that create a poll via an add action to the poll module.

Recommendations For DiY-CMS version 1.0, consider implementing token-based validation to prevent cross-site request forgery attacks, and restrict access to the poll module's add action to authorized administrators only.