CVE-2018-9923 An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request.
HighCVSS 8.8
EPSS 0.60%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| icmsdev icms | <= 7.0.7 | No fix listed |
References
- github.com exploit patch third-party-advisory