# Exploit Title: MACCMS_V10 CSRF vulnerability add admin account # Date: 2018-06-11 # Exploit Author: bay0net # Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html # Software Link: http://www.maccms.com/down.html # Version: V10 # CVE : CVE-2018-12114 I found a CSRF vulnerability in maccms_v10,this vulnerability can be arbitrarily added to users. The payload for attack is as follows.