An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admincp.php?app=members&do=save&frame=iPHP.Referenceshttps://github.com/idreamsoft/iCMS/issues/20
