CVE-2020-18694: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/saveprofile"...

IgnitedCMS 跨站请求伪造漏洞

Ignited CMS is a content management system CMS. A cross-site request forgery vulnerability exists in IgnitedCMS, which stems from the product /admin/profile/saveprofile failing to validate that a request is from a trusted user. This vulnerability can be exploited to obtain sensitive information a...