JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator.
jizhicms jizhicms 1.5.1