iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery CSRF via /admincp.php?app=members&do=add...
8.8CVSS5.8AI score0.00537EPSS
SaveExploits1References1
OSV•added 2021/06/07 7:15 p.m.•5 views
CVE-2020-18265
Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...
