EUVD-2023-46775

Malicious code in bioql PyPI...

CVE-2023-42322

Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information...

CVE-2023-42321

Cross Site Request Forgery CSRF vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.admincp.php, and group.admincp.php files...

CVE-2023-42322

Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information...

CVE-2023-42321

Cross Site Request Forgery CSRF vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.admincp.php, and group.admincp.php files...

Information disclosure

Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information...

CVE-2023-42321: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.admincp.php, and group.admincp.php files...

PT-2023-28315 · Icmsdev · Icms

Name of the Vulnerable Software and Affected Versions: icmsdev iCMS version 7.0.16 Description: The issue allows a remote attacker to obtain sensitive information due to an Insecure Permissions vulnerability. Recommendations: For version 7.0.16, update to a version that fixes the Insecure...

CVE-2023-42322: Session Fixation

Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information...

CVE-2023-42321

CVE-2023-42321 describes a CSRF vulnerability in icmsdev iCMS v7.0.16 that could allow a remote attacker to execute arbitrary code via the files user.admincp.php , members.admincp.php , and group.admincp.php . The available connected documents consistently identify the vulnerable component and im...

PT-2023-28314

Name of the Vulnerable Software and Affected Versions icmsdev iCMS version 7.0.16 Description A Cross Site Request Forgery CSRF issue allows a remote attacker to execute arbitrary code via the "user.admincp.php", "members.admincp.php", and "group.admincp.php" files. This can be exploited by...

CVE-2023-42322

The CVE-2023-42322 entry concerns an Insecure Permissions vulnerability in icmsdev iCMS v7.0.16 that enables a remote attacker to obtain sensitive information. The root cause is insecure permissions governing access to data, leading to information disclosure with high impact (Confidentiality/Inte...