Lucene search
IcmsdevIcms7.0.8
2 matches found
CVE-2018-12498
spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php.
9.8CVSS9.8AI score0.00264EPSS
CVE-2018-10250
iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a WeChat Classified Management keyword search.
5.4CVSS5.2AI score0.00206EPSS