Files
CVEs-PoC/2018/CVE-2018-19291.md
T
2024-06-18 02:51:15 +02:00

638 B

CVE-2018-19291

Description

An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI.

POC

Reference

Github

No PoCs found on GitHub currently.