Skip to content

Instantly share code, notes, and snippets.

@ChubbyZ
Created September 6, 2023 02:36
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ChubbyZ/e1e5c1858c389334dcf581a19c741308 to your computer and use it in GitHub Desktop.
Save ChubbyZ/e1e5c1858c389334dcf581a19c741308 to your computer and use it in GitHub Desktop.
CVE-2023-40953
[CVE-ID]
CVE-2023-40953
------------------------------------------
[Description]
icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF).
------------------------------------------
[Vulnerability Type]
Cross Site Request Forgery (CSRF)
------------------------------------------
[Vendor of Product]
icmsdev
------------------------------------------
[Affected Product Code Base]
icms - V7.0.16
------------------------------------------
[Affected Component]
do_save()
------------------------------------------
[Attack Type]
Remote
------------------------------------------
[Impact Code execution]
true
------------------------------------------
[Impact Information Disclosure]
true
------------------------------------------
[Attack Vectors]
BurpSuite--->CSRF POC?
------------------------------------------
[Reference]
https://www.icmsdev.com/
------------------------------------------
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment