PT-2018-13275

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.11 Description A Server-Side Request Forgery SSRF issue was found due to the remote function in app/spider/spider tools.class.php not properly blocking DNS hostnames associated with private and reserved IP addresses...

PT-2018-12769

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS versions prior to 7.0.11 Description A Server-Side Request Forgery SSRF issue was found due to the remote function in app/spider/spider tools.class.php not blocking private and reserved IP addresses, such as 10.0.0.0/8. This...