197 matches found
PT-2023-32680 · Thecosy · Thecosy Icecms
Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A vulnerability was found in the Comment Like Handler component, affecting the processing of the file /Websquare/likeClickComment/. This issue leads to improper enforcement of a single, unique action...
PT-2023-32679 · Thecosy · Thecosy Icecms
Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A vulnerability was found in the User Comment Handler component, affecting unknown code of the file /planet. The manipulation leads to cross site scripting. The attack can be initiated remotely...
IceCMS Security Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in IceCMS version 2.0.1, which stems from not fully validating the number of user requests...
IceCMS 跨站脚本漏洞
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site scripting vulnerability exists in IceCMS version 2.0.1. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...
CVE-2023-6438
A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...
CVE-2023-6438
A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...
Information disclosure
A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...
CVE-2023-6438 Thecosy IceCMS Like improper enforcement of a single, unique action
A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...
CVE-2023-6438
The CVE-2023-6438 case affects IceCMS 2.0.1, specifically the /WebArticle/articles/ area within the Like Handler component. The root cause is an improper enforcement of a single, unique action in an unknown function, allowing remote exploitation. Public exploit information has been disclosed. For...
IceCMS Security Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation of NgShow individual developers . A security vulnerability exists in IceCMS version 2.0.1. Currently there is no information about this vulnerability, please stay tuned to CNNVD or vendor...
PT-2023-32666 · Icecms · Icecms
Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: A vulnerability has been found in IceCMS, affecting an unknown function of the file /WebArticle/articles/ of the component Like Handler. This issue leads to improper enforcement of a single, unique action and...
IceCMS Cross-Site Request Forgery Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site request forgery vulnerability exists in IceCMS v2.0.1, which originates from a WEB application that does not adequately validate whether a request comes from a trusted user. An attack...
CVE-2023-42188
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2023-42188
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2023-42188
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...
Cross site request forgery (csrf)
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...
IceCMS 跨站请求伪造漏洞
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site request forgery vulnerability exists in IceCMS v2.0.1, which originates from a WEB application that does not adequately validate whether a request comes from a trusted user. An attack...
CVE-2023-42188
IceCMS v2.0.1 is vulnerable to Cross-Site Request Forgery (CSRF). The issue originates from insufficient validation of request origin, enabling a malicious actor to forge requests that trigger sensitive operations. Public descriptions confirm CSRF vulnerability for IceCMS 2.0.1. Some sources sugg...
