An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php.
References
Link | Resource |
---|---|
https://github.com/chenrui1896/issue/blob/master/del_article | Exploit Third Party Advisory |
https://github.com/p8w/akcms/issues/2 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-06-19 11:29
Updated : 2018-08-09 04:08
NVD link : CVE-2018-12583
Mitre link : CVE-2018-12583
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
akcms_project
- akcms