CVE-2018-16366

An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF...

PT-2018-13521

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.10 Description An issue was discovered that allows Cross-Site Request Forgery CSRF attacks. The "admincp.php?app=user&do=save" endpoint is vulnerable to this issue. Recommendations For idreamsoft iCMS version 7.0.10...