CVE-2018-10117: CSRF
An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admincp.php?app=members&do=save&frame=iPHP.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the CSRF vulnerability in idreamsoft iCMS V7.0.7?
The vulnerability ID for the CSRF vulnerability in idreamsoft iCMS V7.0.7 is CVE-2018-10117.
What is the severity of CVE-2018-10117?
The severity of CVE-2018-10117 is high with a CVSS score of 8.8.
How does the CSRF vulnerability in idreamsoft iCMS V7.0.7 work?
The CSRF vulnerability in idreamsoft iCMS V7.0.7 allows an attacker to add an admin account by exploiting the 'admincp.php?app=members&do=save&frame=iPHP' URI.
How can I check if my version of idreamsoft iCMS is affected by CVE-2018-10117?
You can check if your version of idreamsoft iCMS is affected by CVE-2018-10117 by comparing the version number to the affected version, which is 7.0.7.
Is there a fix available for CVE-2018-10117?
At the time of writing, there is no specific fix available for CVE-2018-10117. It is recommended to keep the software up to date and apply security patches when they become available.