CVE-2018-10222

An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=articlecategory&do=save&frame=iPHP...

PT-2018-9764

Name of the Vulnerable Software and Affected Versions: idreamsoft iCMS version 7.0 Description: A CSRF issue was found that can be exploited to add a Column via the "/admincp.php?app=article category&do=save&frame=iPHP" API endpoint. Recommendations: For idreamsoft iCMS version 7.0, as a temporar...