MiniCMS
MiniCMS copied to clipboard
I find another vulnerability CSRF to delete page in mc-admin/page.php
use CSRF vulnerability to delete multiple pages
it was found in mc-admin/page.php.This vulnerability is similar to CVE-2019-9603 but at a different place.
if admin create new page like ccc,aaa or more


Vulnerability details: When the administrator logs in, opening the webpage will automatically delete the specified page
Vulnerability url: http://127.0.0.1/MiniCMS/mc-admin/page.php
Vulnerability POC:
delete one :
delete more :
just like this:
