4 matches found
Sql injection
An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php dataid parameter...
CVE-2019-6259
An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php dataid parameter...
PT-2019-18056
Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.13 Description An issue was discovered that allows SQL Injection via the app/article/article.admincp.php API endpoint, specifically through the data id parameter. Recommendations For idreamsoft iCMS version 7.0.13,...
CVE-2019-6259: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php dataid parameter...