HYSCALE System version 1.9 suffers from add administrator and cross site request forgery vulnerabilities.