CVE-2019-9652: Cross-Site Request Forgery (CSRF)

There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the t2 parameter...

PT-2019-19778

Name of the Vulnerable Software and Affected Versions SDCMS version 1.7 Description The issue concerns a CSRF that allows PHP code injection. This is achieved by sending a request with m=admin&c=theme&a=edit and providing a filename in the file parameter, along with file content in the t2...