Skip to content

CVE-2019-8902 An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.

MediumCVSS 5.7 EPSS 0.38%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.

Affected products

ProductAffected versionsFixed in
idreamsoft icms <= 7.0.14 No fix listed

References

  • github.com exploit issue-tracking third-party-advisory