2 matches found
CVE-2023-42321: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.admincp.php, and group.admincp.php files...
8.8CVSS8.3AI score0.00412EPSS
SaveExploits0References2
PT-2023-28314
Name of the Vulnerable Software and Affected Versions icmsdev iCMS version 7.0.16 Description A Cross Site Request Forgery CSRF issue allows a remote attacker to execute arbitrary code via the "user.admincp.php", "members.admincp.php", and "group.admincp.php" files. This can be exploited by...
8.8CVSS6.5AI score0.00412EPSS
SaveExploits0References7
20