Lucene search
+L

219 matches found

OSV
OSV
•added 2023/11/30 5:15 p.m.•17 views

CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

5.3CVSS4.9AI score0.00704EPSS
SaveExploits1References3
NVD
NVD
•added 2023/11/30 5:15 p.m.•33 views

CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

5.3CVSS0.00704EPSS
SaveExploits1References3
Prion
Prion
•added 2023/11/30 5:15 p.m.•37 views

Information disclosure

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

4CVSS7.2AI score0.00704EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/11/30 5:00 p.m.•49 views

CVE-2023-6438 Thecosy IceCMS Like improper enforcement of a single, unique action

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

4.3CVSS5.7AI score0.00704EPSS
SaveExploits1References3
CVE
CVE
•added 2023/11/30 5:00 p.m.•69 views

CVE-2023-6438

The CVE-2023-6438 case affects IceCMS 2.0.1, specifically the /WebArticle/articles/ area within the Like Handler component. The root cause is an improper enforcement of a single, unique action in an unknown function, allowing remote exploitation. Public exploit information has been disclosed. For...

5.3CVSS4.9AI score0.00704EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/30 12:00 a.m.•1 views

CVE-2023-6438: Improper Enforcement of a Single, Unique Action

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

5.3CVSS5.1AI score0.00704EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/11/30 12:00 a.m.•21 views

PT-2023-32666 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: A vulnerability has been found in IceCMS, affecting an unknown function of the file /WebArticle/articles/ of the component Like Handler. This issue leads to improper enforcement of a single, unique action and...

5.3CVSS4.9AI score0.00704EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2023/11/30 12:00 a.m.•16 views

IceCMS Security Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation of NgShow individual developers . A security vulnerability exists in IceCMS version 2.0.1. Currently there is no information about this vulnerability, please stay tuned to CNNVD or vendor...

5.3CVSS6.5AI score0.00704EPSS
SaveExploits1References3
CNVD
CNVD
•added 2023/10/30 12:00 a.m.•50 views

IceCMS Cross-Site Request Forgery Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site request forgery vulnerability exists in IceCMS v2.0.1, which originates from a WEB application that does not adequately validate whether a request comes from a trusted user. An attack...

6.5CVSS6.6AI score0.00219EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/27 12:15 a.m.•8 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

6.5CVSS5.8AI score0.00219EPSS
SaveExploits1References3
OSV
OSV
•added 2023/10/27 12:15 a.m.•17 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

6.5CVSS5.8AI score0.00219EPSS
SaveExploits1References2
NVD
NVD
•added 2023/10/27 12:15 a.m.•28 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

6.5CVSS6.5AI score0.00219EPSS
SaveExploits1References2
Prion
Prion
•added 2023/10/27 12:15 a.m.•24 views

Cross site request forgery (csrf)

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

4.3CVSS6.5AI score0.00219EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2023/10/26 12:00 a.m.•57 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross-Site Request Forgery (CSRF). The issue originates from insufficient validation of request origin, enabling a malicious actor to forge requests that trigger sensitive operations. Public descriptions confirm CSRF vulnerability for IceCMS 2.0.1. Some sources sugg...

6.5CVSS6.4AI score0.00219EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/10/26 12:00 a.m.•15 views

IceCMS 跨站请求伪造漏洞

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site request forgery vulnerability exists in IceCMS v2.0.1, which originates from a WEB application that does not adequately validate whether a request comes from a trusted user. An attack...

6.5CVSS6.8AI score0.00219EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/10/26 12:00 a.m.•42 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

6.7AI score0.00219EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/26 12:00 a.m.•6 views

CVE-2023-42188: Cross-Site Request Forgery (CSRF)

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

6.5CVSS6.7AI score0.00219EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/10/26 12:00 a.m.•14 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

7.1AI score0.00219EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/10/26 12:00 a.m.•11 views

PT-2023-28289 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For IceCMS version 2.0.1, update...

6.5CVSS6.3AI score0.00219EPSS
SaveExploits1References3
NVD
NVD
•added 2023/10/12 6:15 a.m.•28 views

CVE-2023-40833

An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting...

9.8CVSS9.6AI score0.00719EPSS
SaveExploits0References1
Rows per page
Query Builder