critical9.8
CVE-2018-9924
An issue was discovered in idreamsoft iCMS through 7.0.7.
Impact
An issue was discovered in idreamsoft iCMS through 7.0.7. SQL injection exists via the pid array parameter in an admincp.php?app=tag&do=save&frame=iPHP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icmsdev | Icms | through 7.0.7 |