CVE-2020-21141

iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery CSRF via /admincp.php?app=members&do=add...

CVE-2020-19142

iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DBPREFIX parameter to install/install.php...

CVE-2019-16677

An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF...

CVE-2019-7235

An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request...

iCMS Cross-Site Request Forgery Vulnerability

iCMS is a content management system CMS built with PHP and MySQL databases. A cross-site request forgery vulnerability exists in iCMS version 7.0.9, which can be exploited by remote attackers with the help of the admincp.php?app=article&do=update page to make administrators review and approve any...

CVE-2018-16366

An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF...

CVE-2018-10222

An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=articlecategory&do=save&frame=iPHP...