CVE

CVE-2018-19291

CVE-2018-19291

An issue discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI.

Source: CVE-2018-19291

Exit mobile version