CVE-2019-10644

CVE-2019-10644 describes a Cross-Site Request Forgery (CSRF) vulnerability in HYBBS 2.2, specifically affecting the /?admin/user.html endpoint. This high-severity vulnerability (CVSS 8.8) allows an unauthenticated attacker to add an administrator account if a legitimate administrator is tricked into visiting a malicious page. While the potential impact is significant, leading to full compromise of confidentiality, integrity, and availability, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.