EUVD-2019-15825

Malware in sbrugna...

PT-2019-18056

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.13 Description An issue was discovered that allows SQL Injection via the app/article/article.admincp.php API endpoint, specifically through the data id parameter. Recommendations For idreamsoft iCMS version 7.0.13,...

CVE-2018-16332

An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability...

PT-2018-13495

Name of the Vulnerable Software and Affected Versions iCMS version 7.0.9 Description An issue was discovered in the software, which is related to a CSRF vulnerability in the admincp.php endpoint, specifically when app=article and do=update. Recommendations For iCMS version 7.0.9, consider...

PT-2018-12886

Name of the Vulnerable Software and Affected Versions ThinkSAAS versions prior to 2018-07-25 Description The issue allows for XSS via the content parameter in the "index.php?app=article&ac=comment&ts=do" endpoint. Recommendations For versions prior to 2018-07-25, update to a version released afte...

CVE-2018-9923

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...

PT-2018-19091

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS versions prior to 7.0.8 Description An issue exists where CSRF is present in the admincp.php file. This can be demonstrated by adding an article via the "app=article&do=save&frame=iPHP" request to the "/admincp.php" endpoint,...

PT-2017-6711

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0 1.9.1 Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to the "apps/app article/controller/rating.php"...

CVE-2017-11415

Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/sysarticle.php via $POST'parentid', $POST'desc', $POST'keys', and $POST'level'...

PT-2017-11999

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue concerns SQL injection. It can be exploited via the id variable in the /dapur/apps/app article/controller/article status.php endpoint. Recommendations For Fiyo CMS version 2.0.7, consider restrictin...

PT-2017-11954

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue is related to an SQL injection vulnerability. It occurs in the dapur/apps/app article/sys article.php file through the name parameter when editing or adding a tag name. Recommendations For Fiyo CMS...