cve/2020/CVE-2020-24739.md
2024-05-25 21:48:12 +02:00

676 B

CVE-2020-24739

Description

A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRF_TOKEN and can still request normally, all administrators except the initial administrator will be deleted.

POC

Reference

No PoCs from references.

Github