249 matches found
PT-2023-24306 · Icecms · Icecms
Name of the Vulnerable Software and Affected Versions: IceCMS version 1.0.0 Description: The issue is related to Insecure Permissions, allowing unauthorized access to the API. This results in the disclosure of sensitive information. Recommendations: For IceCMS version 1.0.0, consider restricting...
IceCMS security vulnerabilities
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . An access control error vulnerability exists in IceCMS v1.0.0, which stems from improper access control in the system and can be exploited by an attacker to cause sensitive information leakage...
CVE-2023-33355
IceCMS v1.0.0 is affected by an Insecure Permissions vulnerability that allows unauthorized access to the API and results in disclosure of sensitive information. The issue stems from improper access control in IceCMS, as described across multiple sources (e.g., CNVD, NVD/Red Hat records). Affecte...
CVE-2023-33355
IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information...
PT-2023-24307 · Icecms · Icecms
Name of the Vulnerable Software and Affected Versions: IceCMS version 1.0.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take control of the user's session...
CVE-2023-33355: Undefined Security Weakness
IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information...
CVE-2023-33356: Improper Neutralization of Input During Web Page Generation
IceCMS v1.0.0 is vulnerable to Cross Site Scripting XSS...
