OpenSolution QuickCMS Cross-Site Request Forgery Vulnerability in Page Deletion Functionality

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in OpenSolution QuickCMS version 6.8, specifically within the page deletion feature. This vulnerability allows a malicious attacker to create a website that, when visited by an administrator, automatically sends a POST request to delete an article. While the vendor was notified about this issue, no details regarding the vulnerability or affected version range were provided. Only QuickCMS version 6.8 has been tested and confirmed as vulnerable, leaving the status of other versions uncertain.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of articles by tricking an administrator into visiting a malicious website.