PT-2018-11269 · Akcms · Akcms

Chenrui1896 · Published 2018-06-19 · Updated 2018-08-09 · CVE-2018-12583

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions AKCMS version 6.1

Description An issue was discovered that allows CSRF to delete an article via an admincp deleteitem action to "index.php".

Recommendations For AKCMS version 6.1, consider implementing CSRF protection measures to prevent unauthorized deletion of articles, such as validating user requests and ensuring that the deleteitem action is properly authenticated.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-12583

Affected Products

Akcms

References · 4

• 🔥❌ https://github.com/chenrui1896/issue/blob/master/del_article · Exploit, Deleted
• 🔥 https://github.com/p8w/akcms/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12583 · Security Note
• https://osv.dev/vulnerability/CVE-2018-12583 · Vendor Advisory