Files
CVEs-PoC/2018/CVE-2018-19291.md
T
2024-05-26 14:27:05 +02:00

638 B

CVE-2018-19291

Description

An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI.

POC

Reference

Github

No PoCs found on GitHub currently.