LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content vi...

参照URL

• patch github.com
• report packetstormsecurity.com
• report github.com
• report exploit-db.com