njiandan-cms through 2013-05-23 has index.php/admin/user_new CSRF to add an administrator.
- https://github.com/beyond7176/njiandan-cms/issues/1
No PoCs found on GitHub currently.