Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account.
- https://github.com/farliy-hacker/Doufoxcms/issues/1
No PoCs found on GitHub currently.