CVE-2018-10222: CSRF
Published Apr 19, 2018
·Updated
An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=articlecategory&do=save&frame=iPHP.
Affected Software
1 affected component
icmsdev icms=7.0
Event History
Apr 19, 2018
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-10222.
2
What is the affected software version?
The affected software version is iCMS V7.0.
3
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is high (8.8).
4
How can this vulnerability be exploited?
This vulnerability can be exploited through a CSRF attack via the /admincp.php?app=article_category&do=save&frame=iPHP URL.
5
Is there a fix available for this vulnerability?
No specific fix information is provided, but it is recommended to update to the latest version of the software when available and apply any necessary patches or security updates.