CVE-2020-19889

Name of the Vulnerable Software and Affected Versions DBHcms version 1.2.0

Description The issue concerns the lack of a CSRF protection mechanism. This can be demonstrated through a CSRF attack on the "index.php?dbhcms pid=-70" endpoint, which allows adding a user.

Recommendations For DBHcms version 1.2.0, consider implementing a CSRF protection mechanism to prevent such attacks. As a temporary workaround, restrict access to the "index.php?dbhcms pid=-70" endpoint to minimize the risk of exploitation.