158 matches found
CVE-2023-39805
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...
CVE-2023-39805: Improper Neutralization of Special Elements used in an SQL Command
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...
CVE-2022-41496
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery SSRF via the url parameter at admincp.php...
Server side request forgery (ssrf)
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery SSRF via the url parameter at admincp.php...
CVE-2022-41496
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery SSRF via the url parameter at admincp.php...
PT-2022-25893 · Icms · Icms
Name of the Vulnerable Software and Affected Versions: iCMS version 7.0.16 Description: A Server-Side Request Forgery SSRF issue was discovered, which can be exploited via the url parameter at the "admincp.php" endpoint. Recommendations: For iCMS version 7.0.16, avoid using the url parameter in t...
CVE-2022-41496
CVE-2022-41496 affects iCMS v7.0.16 with a Server-Side Request Forgery (SSRF) via the url parameter in admincp.php. CVSSv3.1 base score 9.8 (CRITICAL) — network access, no user interaction required. Connected documents confirm the SSRF issue; PT-2022 offers a workaround: avoid or restrict the url...
CVE-2022-41496: Server-Side Request Forgery (SSRF)
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery SSRF via the url parameter at admincp.php...
iCMS Cross-site Request Forgery Vulnerability
iCMS is an application. An efficient and simple content management system built with PHP and MySQL. iCMS version 7.0.15 has a security vulnerability that allows attackers to perform CSRF attacks via "/admincp.php?app=members&do=add"...
CVE-2020-21141
iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery CSRF via /admincp.php?app=members&do=add...
Cross site request forgery (csrf)
iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery CSRF via /admincp.php?app=members&do=add...
CVE-2020-21141
iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery CSRF via /admincp.php?app=members&do=add...
PT-2021-10596
Name of the Vulnerable Software and Affected Versions: iCMS version 7.0.15 Description: The issue is related to a Cross-Site Request Forgery CSRF that can be exploited via the /admincp.php?app=members&do=add API endpoint. This allows for unauthorized actions to be performed on behalf of a user...
CVE-2020-21141: Cross-Site Request Forgery (CSRF)
iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery CSRF via /admincp.php?app=members&do=add...
Integer overflow
idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service resource consumption via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer...
CVE-2019-17583
idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service resource consumption via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer...
PT-2019-15215
Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.15 Description The issue allows remote attackers to cause a denial of service due to resource consumption. This can be achieved by sending a query for many comments, for example, through the...
CVE-2019-17583: Allocation of Resources Without Limits or Throttling
idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service resource consumption via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer...
