CVE-2018-16366: CSRF
An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-16366?
CVE-2018-16366 refers to a vulnerability discovered in idreamsoft iCMS V7.0.10 which allows CSRF (Cross-Site Request Forgery) attacks through the 'admincp.php?app=user&do=save' endpoint.
What is the severity of CVE-2018-16366?
CVE-2018-16366 has a severity rating of 8.8, which is considered high.
How does CVE-2018-16366 affect idreamsoft iCMS?
CVE-2018-16366 affects idreamsoft iCMS V7.0.10 and allows CSRF attacks, which can potentially lead to unauthorized actions being performed on behalf of the user.
Is there a fix for CVE-2018-16366?
At the moment, there is no known fix for CVE-2018-16366, so it is recommended to follow best security practices and mitigate the risk by implementing additional security measures.
Where can I find more information about CVE-2018-16366?
More information about CVE-2018-16366 can be found at the following link: [https://github.com/idreamsoft/iCMS/issues/32](https://github.com/idreamsoft/iCMS/issues/32)