CVE-2018-9923

2018-04-1006:00:00

mitre

www.cve.org

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request.

References

github.com/idreamsoft/iCMS/issues/17