CVE-2013-7334

Name of the Vulnerable Software and Affected Versions ImageCMS versions prior to 4.2

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q parameter.

Recommendations For versions prior to 4.2, update to version 4.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the q parameter to minimize the risk of exploitation.