Lucene search

K

Icms Security Vulnerabilities - 2020

cve

iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php.

9.8CVSS

9.7AI Score

0.004EPSS

2020-12-10 11:15 PM

19

cve

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.

9.8CVSS

9.7AI Score

0.004EPSS

2020-12-10 11:15 PM

25

cve

A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRF_TOKEN and can still request normally, all administrators except the initial administrator will be deleted.

6.5CVSS

6.5AI Score

0.001EPSS

2020-09-10 02:15 PM

20

2