CVE-2018-12498

spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider=batch request to admincp.php...

CVE-2018-10250

iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixincategory action, aka a WeChat Classified Management keyword search...

EUVD-2019-7238

Malware in sbrugna...

EUVD-2019-16779

Malware in sbrugna...

EUVD-2018-8165

Malware in sbrugna...

EUVD-2018-8171

Malware in sbrugna...

EUVD-2018-6332

Malware in sbrugna...

EUVD-2018-21515

Malware in sbrugna...

EUVD-2006-5546

Malware in sbrugna...

EUVD-2018-2324

Malware in sbrugna...

EUVD-2023-43505

Malicious code in bioql PyPI...

EUVD-2022-44689

Malicious code in bioql PyPI...

CVE-2020-21141

iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery CSRF via /admincp.php?app=members=add...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.admincp.php, and group.admincp.php files...

CVE-2023-39805

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...

CVE-2023-39805

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...

Sql injection

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...

CVE-2023-39805

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...

CVE-2023-39805

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...

PT-2023-27112 · Icms · Icms

Name of the Vulnerable Software and Affected Versions: iCMS version 7.0.16 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the where parameter at the "admincp.php" endpoint. Recommendations: For iCMS version 7.0.16, avoid using the where parameter in th...