PT-2018-11269 · Akcms · Akcms

Chenrui1896 · Publicado 2018-06-19 · Atualizado 2018-08-09 · CVE-2018-12583

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions AKCMS version 6.1

Description An issue was discovered that allows CSRF to delete an article via an admincp deleteitem action to "index.php".

Recommendations For AKCMS version 6.1, consider implementing CSRF protection measures to prevent unauthorized deletion of articles, such as validating user requests and ensuring that the deleteitem action is properly authenticated.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-12583

Produtos afetados

Akcms

Referências · 4

• 🔥❌ https://github.com/chenrui1896/issue/blob/master/del_article · Exploit, Deleted
• 🔥 https://github.com/p8w/akcms/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12583 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12583 · Aviso do Fabricante