29 matches found
CVE-2026-30661
The iCMS v8.0.0 content management system is vulnerable to Cross-Site Scripting (XSS) within the User Management component, specifically in the index.html file. The root cause is the improper handling of the regip and loginip parameters, which allows remote attackers to execute arbitrary web scri...
CVE-2026-30661
iCMS v8.0.0 contains a Cross-Site Scripting XSS vulnerability in the User Management component, specifically within the index.html file. This allows remote attackers to execute arbitrary web script or HTML via the regip or loginip parameters...
CVE-2019-11426
An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter...
EUVD-2018-2324
Malware in sbrugna...
EUVD-2018-10418
Malware in sbrugna...
EUVD-2018-8181
Malware in sbrugna...
EUVD-2019-16710
Malware in sbrugna...
EUVD-2020-17450
Malware in sbrugna...
EUVD-2018-8171
Malware in sbrugna...
EUVD-2023-43505
Malicious code in bioql PyPI...
EUVD-2023-43506
Malicious code in bioql PyPI...
EUVD-2023-45492
Malicious code in bioql PyPI...
EUVD-2023-46774
Malicious code in bioql PyPI...
CVE-2023-39806
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function...
CVE-2023-42321
Cross Site Request Forgery CSRF vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.admincp.php, and group.admincp.php files...
CVE-2020-18070
Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "dodel" method of the component "database.admincp.php"...
CVE-2020-21141
iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery CSRF via /admincp.php?app=members=add...
CVE-2023-42321
Cross Site Request Forgery CSRF vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.admincp.php, and group.admincp.php files...
CVE-2023-42321
Cross Site Request Forgery CSRF vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.admincp.php, and group.admincp.php files...
