249 matches found
CVE-2023-42188
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...
Cross site request forgery (csrf)
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2023-42188
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...
IceCMS Cross-Site Request Forgery Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site request forgery vulnerability exists in IceCMS v2.0.1, which originates from a WEB application that does not adequately validate whether a request comes from a trusted user. An attack...
CVE-2023-42188: Cross-Site Request Forgery (CSRF)
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2023-42188
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2023-42188
IceCMS v2.0.1 is vulnerable to Cross-Site Request Forgery (CSRF). The issue originates from insufficient validation of request origin, enabling a malicious actor to forge requests that trigger sensitive operations. Public descriptions confirm CSRF vulnerability for IceCMS 2.0.1. Some sources sugg...
PT-2023-28289 · Icecms · Icecms
Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For IceCMS version 2.0.1, update...
CVE-2023-40833
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting...
CVE-2023-40833
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting...
CVE-2023-40833
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting...
Design/Logic Flaw
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting...
CVE-2023-40833
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting...
CVE-2023-40833: Undefined Security Weakness
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting...
PT-2023-27661 · Thecosy · Thecosy Icecms
Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 1.0.0 Description: The issue allows a remote attacker to gain privileges. This is achieved via the Id and key parameters in the getCosSetting function. Recommendations: For Thecosy IceCMS version 1.0.0, consider...
IceCMS Security Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in IceCMS v.1.0.0, which originated from allowing an attacker to gain privileges via the Id and key parameters in getCosSetting...
CVE-2023-40833
The CVE-2023-40833 entry concerns Thecosy IceCMS v1.0.0. A remote attacker can gain privileges via the Id and key parameters in getCosSetting, with impact described as Confidentiality/Integrity/Availability High. Public sources consistently describe a privilege escalation/vector affecting getCosS...
CVE-2023-40833
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting...