target:https://github.com/geeeeeeeek/dingfanzu version: V1.0 dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://127.0.0.1:80/admin/doAdminAction.php?act=delAdmin&id=17 POC: ``` ```