219 matches found
CVE-2025-22983
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2025-22984
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2025-22984
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2025-22984: Insecure Storage of Sensitive Information
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2025-22984
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
PT-2025-4758 · Icecms · Icecms
Name of the Vulnerable Software and Affected Versions: iceCMS version 2.2.0 Description: An access control issue in the component "/api/squareComment/DelectSquareById" allows unauthenticated attackers to access sensitive information. Recommendations: For iceCMS version 2.2.0, consider disabling...
IceCMS 安全漏洞
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in IceCMS version v2.2.0, which originates from improper access control in component /square/getAllSquare/circle. An attacker...
CVE-2025-22984
The iceCMS content management system (v2.2.0) is affected by an access control issue in the /api/squareComment/DelectSquareById component. This vulnerability allows unauthenticated attackers to access sensitive information due to improper access controls. While no official patch is currently iden...
CVE-2025-22983
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
IceCMS 安全漏洞
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in IceCMS version v2.2.0, which originates from improper access control in component/api/squareComment/DelectSquareById. An attacker...
PT-2025-4757 · Icecms · Icecms
Name of the Vulnerable Software and Affected Versions: iceCMS version 2.2.0 Description: An access control issue in the component "/square/getAllSquare/circle" allows unauthenticated attackers to access sensitive information. Recommendations: For iceCMS version 2.2.0, consider restricting access ...
CVE-2025-22983
A security vulnerability exists in iceCMS version 2.2.0 due to an access control issue in the /square/getAllSquare/circle component. This flaw allows unauthenticated attackers to access sensitive information . As a temporary workaround, it is recommended to restrict access to this specific compon...
CVE-2025-22983
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2025-22983: Insecure Storage of Sensitive Information
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
IceCMS File Upload Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A file upload vulnerability exists in IceCMS 3.4.7 and earlier versions, which stems from the lack of validation of uploaded files in the uploadFile method of FileUtils.java. An attacker can use...
CVE-2024-48202
icecms =3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile...
CVE-2024-48202
icecms =3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile...
CVE-2024-48202
The IceCMS content management system (versions 3.4.7 and earlier ) contains a File Upload vulnerability in the uploadFile method of FileUtils.java. The root cause is a lack of validation for uploaded files, which allows an attacker to upload malicious files and achieve remote code execution (RCE)...
IceCMS 安全漏洞
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A file upload vulnerability exists in IceCMS 3.4.7 and earlier versions, which stems from the lack of validation of uploaded files in the uploadFile method of FileUtils.java. An attacker can use...