CVE-2019-16677: CSRF
Published Sep 21, 2019
·Updated
An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.
Affected Software
1 affected component
idreamsoft iCMS=7.0.0
Event History
Sep 21, 2019
CVE Published
via MITRE·07:51 PM
Data Sourced
via MITRE·07:51 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-16677.
2
What is the severity of CVE-2019-16677?
The severity of CVE-2019-16677 is medium.
3
What is the affected software for CVE-2019-16677?
The affected software for CVE-2019-16677 is idreamsoft iCMS V7.0.
4
How can this vulnerability be exploited?
This vulnerability can be exploited through the admincp.php?app=members&do=del page, which allows CSRF.
5
Is there a fix available for CVE-2019-16677?
At the moment, there is no known fix available for CVE-2019-16677. It is recommended to follow the official vendor advisory for any updates.