A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7737
Reference (s):
- https://github.com/Verytops/verydows/issues/10