admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-352,
Products Affected