Cross site request forgery (csrf)

A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRFTOKEN and can still request normally, all administrators except the initial administrator will be deleted...

CVE-2020-24739

A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRFTOKEN and can still request normally, all administrators except the initial administrator will be deleted...

CVE-2020-24739

CVE-2020-24739 describes a CSRF flaw in iCMS v7.0.0 where, if the CSRF_TOKEN is missing, a background deletion action can delete all administrator accounts except the initial admin. This vulnerability is documented by multiple sources (Red Hat, CNVD, NVD, CVE lists) with the same basic descriptio...

SQL Injection Vulnerability in iCMS Backend

iCMS is an efficient and simple content management system built with PHP and MySQL. An SQL injection vulnerability exists in the iCMS backend, which can be exploited by attackers to obtain sensitive database information...

idreamsoft iCMS Denial of Service Vulnerability

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in idreamsoft iCMS version 7.0.15. A remote attacker can exploit the vulnerability to cause a denial of service resource consumption by querying comments...

idreamsoft iCMS spider_project.admincp.php file SQL injection vulnerability

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the spiderproject.admincp.php file in idreamsoft iCMS version 7.0.14. The vulnerability stems from a lack of validation of externally entered SQL statements in...

CVE-2019-17583

idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service resource consumption via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer...

CVE-2019-17583

idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service resource consumption via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer...

CVE-2019-17583

idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service resource consumption via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer...

CVE-2019-17583

This CVE affects idreamsoft iCMS 7.0.15 . The vulnerability is a Denial of Service via a crafted request that abuses the comment query in admincp.php (app=comment&perpage=...), causing resource consumption when querying many comments. Root cause is not explicitly detailed beyond a large positive ...

CVE-2019-17552

An issue was discovered in idreamsoft iCMS v7.0.14. There is a spiderproject.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload...

Sql injection

An issue was discovered in idreamsoft iCMS v7.0.14. There is a spiderproject.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload...

CVE-2019-17552

Concrete details found: CVE-2019-17552 affects idreamsoft iCMS v7.0.14. The vulnerability is a SQL injection in spider_project.admincp.php during the 'upload spider project scheme' feature, exploitable via a two-dimensional payload. The issue is documented across multiple sources (NVD, Red Hat, C...

CVE-2019-16677

An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF...

CVE-2019-16677

An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF...

Cross site request forgery (csrf)

An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF...

CVE-2019-16677

CVE-2019-16677 affects idreamsoft iCMS 7.0; the vulnerability is a CSRF flaw in admincp.php?app=members&do=del. The connected records corroborate a CSRF issue but do not provide exploit details, affected versions beyond iCMS V7.0, or remediation steps. MITRE/ATT&CK mappings are not specified in t...

CVE-2019-16677

An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF...

idreamsoft iCMS Cross-Site Scripting Vulnerability (CNVD-2020-17020)

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in idreamsoft iCMS version 7.0.15, which stems from a lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to...

CVE-2019-14976

iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...