Integer overflow

2019-10-1416:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

JSON

idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer.

CPENameOperatorVersion
icmseq7.0.15

CPE	Name	Operator	Version
	icms	eq	7.0.15

References

github.com/idreamsoft/iCMS/issues/83