406 matches found
CVE-2023-39806
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function...
CVE-2023-39805
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...
CVE-2023-39805
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...
Sql injection
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...
Sql injection
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function...
CVE-2023-39806
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function...
CVE-2023-39806
CVE-2023-39806 affects iCMS v7.0.16 with a SQL injection vulnerability in the bakupdata function. Reported in multiple sources, it yields a high/critical impact (CVSS v3.1: 9.8) via network access and no privileges required. The vulnerability concerns the bakupdata function, enabling potential SQ...
PT-2023-27112 · Icms · Icms
Name of the Vulnerable Software and Affected Versions: iCMS version 7.0.16 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the where parameter at the "admincp.php" endpoint. Recommendations: For iCMS version 7.0.16, avoid using the where parameter in th...
CVE-2023-39805
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...
CVE-2023-39806
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function...
PT-2023-27113 · Icms · Icms
Name of the Vulnerable Software and Affected Versions: iCMS version 7.0.16 Description: The issue is related to a SQL injection vulnerability. It affects the bakupdata function, allowing for potential SQL injection attacks. Recommendations: For iCMS version 7.0.16, consider disabling the bakupdat...
iCMS SQL Injection Vulnerability
iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A security vulnerability exists in iCMS v7.0.16, which is caused by a SQL injection vulnerability discovered via the bakupdata function...
iCMS SQL Injection Vulnerability
iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A security vulnerability exists in iCMS v7.0.16, which originated from a SQL injection vulnerability found in the where parameter of admincp.php...
CVE-2023-39805
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...
CVE-2023-39805
CVE-2023-39805 affects iCMS v7.0.16, with a SQL injection vulnerability in the where parameter of admincp.php. The issue is documented across multiple feeds; the NVD entry lists a CVSS v3.1 base score of 9.8 (CRITICAL), indicating high impact on confidentiality, integrity, and availability. The r...
idreamsoft iCMS SQL Injection Vulnerability
idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in idreamsoft iCMS. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...
idreamsoft iCMS Cross-Site Scripting Vulnerability
idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in versions prior to idreamsoft iCMS 2.16.1-git. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
CVE-2022-41496
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery SSRF via the url parameter at admincp.php...