← All advisories

Medium severity5.7NVD Advisory· Published Feb 18, 2019· Updated Jun 17, 2026

CVE-2019-8902

CVE-2019-8902

Description

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.

Affected products

3

Idreamsoft/Icmsinferred3 versions
<=7.0.14+ 2 more
- (no CPE)range: <=7.0.14
- cpe:2.3:a:idreamsoft:icms:*:*:*:*:*:*:*:*range: <=7.0.14
- (no CPE)range: <=7.0.14

Patches

Vulnerability mechanics

References

1

github.com/idreamsoft/iCMS/issues/56nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.