cve/2022/CVE-2022-38329.md

CVE-2022-38329

Description

An issue was discovered in Shopxian CMS 3.0.0. There is a CSRF vulnerability that can delete the specified column via index.php/contents-admin_cat-finderdel-model-ContentsCat.html?id=17.

POC

Reference

• https://albert5888.github.io/posts/CVE-2022-38329/
• https://github.com/albert5888/CVE-Issues/blob/main/CVE-2022-38329/file.md
• https://github.com/zhangqiquan/shopxian_cms/issues/4

Github

No PoCs found on GitHub currently.