122 matches found
CVE-2026-108568
The InstantSoft icms2 software (versions up to 2.18.2 ) contains a vulnerability in the Billing Module specifically within the validatePaypalOrder function located in the file system/controllers/billing/actions/paypal.php. An attacker can remotely manipulate the bid/sig arguments to cause insuffi...
EUVD-2026-96871
A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file system/controllers/billing/actions/paypal.php of the component Billing Module. Executing a manipulation of the argument bid/sig can lead to insufficient...
CVE-2026-108567
A path traversal vulnerability exists in InstantSoft icms2 (up to version 2.18.2) within the Image Handler component. Specifically, the files_delete_file function in the file system/fields/image.php file is susceptible to exploitation through manipulation of the argument size. This flaw can be tr...
EUVD-2026-96870
A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...
CVE-2026-108566
A cross-site scripting (XSS) vulnerability exists in InstantSoft icms2 versions up to 2.18.2 . The flaw is located in the index function of the templates/default/controllers/messages/index.tpl.php file within the Private Message Handler component. Improper handling of the nickname argument allows...
EUVD-2026-96869
A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file templates/default/controllers/messages/index.tpl.php of the component Private Message Handler. Such manipulation of the argument nickname leads to cross site scripting. The attack c...
CVE-2023-4879
Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git...
CVE-2023-4654
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1...
CVE-2023-4189
Cross-site Scripting XSS - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4649
Session Fixation in GitHub repository instantsoft/icms2 prior to 2.16.1...
CVE-2023-4650
Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4878
Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4928
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...
CVE-2023-4704
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
EUVD-2023-54764
Malicious code in bioql PyPI...
EUVD-2023-54502
Malicious code in bioql PyPI...
EUVD-2023-54068
Malicious code in bioql PyPI...
EUVD-2023-54506
Malicious code in bioql PyPI...