406 matches found
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
Design/Logic Flaw
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976
CVE-2019-14976 affects iCMS 7.0.15, exposing a cross-site scripting (XSS) vulnerability in the admin panel. The issue arises via the keywords parameter in admincp.php?app=apps, enabling potentially injection of malicious client-side script. Multiple connected sources (NVD/NIST entries and Red Hat...
CVE-2019-11426
An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter...
CVE-2019-11426
An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter...
CVE-2019-11427
An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter...
CVE-2019-11427
An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter...
Cross site scripting
An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter...
Cross site scripting
An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter...
CVE-2019-11427
The CVE-2019-11427 entry concerns an XSS vulnerability in idreamsoft iCMS 7.0.14, exploitable via the public/api.php?app=search&q parameter within the file app/search/search.app.php. Connected sources consistently describe the issue as a Cross-Site Scripting vulnerability in iCMS 7.0.14, with no ...
CVE-2019-11427
An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter...
CVE-2019-11426
CVE-2019-11426 is an XSS vulnerability affecting idreamsoft iCMS 7.0.14, exploitable via the admincp.php?app=config tab parameter in app/admincp/template/admincp.header.php. The issue is documented across multiple connected sources (NVD/Red Hat/EUVD/CVE listings) with CVSS metadata indicating MED...
CVE-2019-11426
An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter...
xss vulnerability in iCMS frontend
iCMS is an efficient and simple content management system built with PHP and MySQL. An xss vulnerability exists in the frontend of iCMS, which can be exploited by attackers to obtain an administrator cookie...
SQL injection vulnerability in iCMS da***.ad***.php page
iCMS is a free, clean, efficient, and useful PHP content management system. A SQL injection vulnerability exists in the iCMS da.ad.php page. The vulnerability stems from the doqu parameter being brought into the database for execution without any processing. An attacker can exploit this...
SQL Injection Vulnerability in iCMS Backend da***.admincp File
iCMS is a free, clean, efficient, and useful PHP content management system. There is a SQL injection vulnerability in the iCMS backend da.admincp file, which can be exploited by attackers to obtain sensitive database information...
idreamsoft iCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-12121)
iCMS is an efficient and simple content management system built with PHP and MySQL. A cross-site request forgery vulnerability exists in idreamsoft iCMS 7.0.14 and earlier versions, which can be exploited by an attacker to delete a user's posts via public/api.php?app=user URI...