Lucene search
+L

197 matches found

Positive Technologies
Positive Technologies
added 2023/12/02 12:0 a.m.7 views

PT-2023-32680 · Thecosy · Thecosy Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A vulnerability was found in the Comment Like Handler component, affecting the processing of the file /Websquare/likeClickComment/. This issue leads to improper enforcement of a single, unique action...

3.7CVSS4.3AI score0.00618EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/12/02 12:0 a.m.7 views

IceCMS 跨站脚本漏洞

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site scripting vulnerability exists in IceCMS version 2.0.1. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...

6.1CVSS6AI score0.00608EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/12/02 12:0 a.m.7 views

PT-2023-32679 · Thecosy · Thecosy Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A vulnerability was found in the User Comment Handler component, affecting unknown code of the file /planet. The manipulation leads to cross site scripting. The attack can be initiated remotely...

6.1CVSS6.4AI score0.00608EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/12/02 12:0 a.m.7 views

IceCMS Security Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in IceCMS version 2.0.1, which stems from not fully validating the number of user requests...

3.7CVSS6.8AI score0.00618EPSS
Exploits1References3
OSV
OSV
added 2023/11/30 5:15 p.m.6 views

CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

5.3CVSS4.9AI score0.00704EPSS
Exploits1References3
NVD
NVD
added 2023/11/30 5:15 p.m.23 views

CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

5.3CVSS0.00704EPSS
Exploits1References3
Prion
Prion
added 2023/11/30 5:15 p.m.26 views

Information disclosure

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

4CVSS7.2AI score0.00704EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/11/30 5:0 p.m.53 views

CVE-2023-6438

The CVE-2023-6438 case affects IceCMS 2.0.1, specifically the /WebArticle/articles/ area within the Like Handler component. The root cause is an improper enforcement of a single, unique action in an unknown function, allowing remote exploitation. Public exploit information has been disclosed. For...

5.3CVSS4.9AI score0.00704EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/11/30 5:0 p.m.33 views

CVE-2023-6438 Thecosy IceCMS Like improper enforcement of a single, unique action

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

4.3CVSS5.7AI score0.00704EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/11/30 12:0 a.m.7 views

PT-2023-32666 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: A vulnerability has been found in IceCMS, affecting an unknown function of the file /WebArticle/articles/ of the component Like Handler. This issue leads to improper enforcement of a single, unique action and...

5.3CVSS4.9AI score0.00704EPSS
Exploits1References8
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.5 views

IceCMS Security Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation of NgShow individual developers . A security vulnerability exists in IceCMS version 2.0.1. Currently there is no information about this vulnerability, please stay tuned to CNNVD or vendor...

5.3CVSS6.5AI score0.00704EPSS
Exploits1References3
CNVD
CNVD
added 2023/10/30 12:0 a.m.30 views

IceCMS Cross-Site Request Forgery Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site request forgery vulnerability exists in IceCMS v2.0.1, which originates from a WEB application that does not adequately validate whether a request comes from a trusted user. An attack...

6.5CVSS6.6AI score0.00219EPSS
Exploits1References1
OSV
OSV
added 2023/10/27 12:15 a.m.3 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

6.5CVSS5.8AI score0.00219EPSS
Exploits1References2
NVD
NVD
added 2023/10/27 12:15 a.m.19 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

6.5CVSS6.5AI score0.00219EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/10/27 12:15 a.m.4 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

6.5CVSS5.8AI score0.00219EPSS
Exploits1References3
Prion
Prion
added 2023/10/27 12:15 a.m.16 views

Cross site request forgery (csrf)

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

4.3CVSS6.5AI score0.00219EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2023/10/26 12:0 a.m.6 views

IceCMS 跨站请求伪造漏洞

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site request forgery vulnerability exists in IceCMS v2.0.1, which originates from a WEB application that does not adequately validate whether a request comes from a trusted user. An attack...

6.5CVSS6.8AI score0.00219EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/10/26 12:0 a.m.10 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

7.1AI score0.00219EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/10/26 12:0 a.m.3 views

PT-2023-28289 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For IceCMS version 2.0.1, update...

6.5CVSS6.3AI score0.00219EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/10/26 12:0 a.m.29 views

CVE-2023-42188

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery CSRF...

6.7AI score0.00219EPSS
Exploits1References2
Rows per page
Query Builder