CVE-2019-8902

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI...

PT-2019-19250

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS versions prior to 7.0.15 Description A CSRF issue allows deletion of users' articles via the "public/api.php?app=user" API endpoint. Recommendations For versions prior to 7.0.15, update to version 7.0.15 or later to resolve the...

CVE-2019-8902: Cross-Site Request Forgery (CSRF)

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI...