Security CNDSOFT 2.3 Cross Site Request Forgery / Shell Upload October 20, 2016 007admin Leave a comment CNDSOFT version 2.3 suffers from cross site request forgery and remote shell upload vulnerabilities.