Icms Security Vulnerabilities and Issues — Icms CVE List

Lucene search

IcmsdevIcms

6 matches found

CVE•added 2023/09/20 9:15 p.m.•39 views

CVE-2023-42322

Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.

9.8CVSS9AI score0.00626EPSS

CVE•added 2018/04/10 6:29 a.m.•38 views

CVE-2018-9924

An issue was discovered in idreamsoft iCMS through 7.0.7. SQL injection exists via the pid array parameter in an admincp.php?app=tag&do=save&frame=iPHP request.

9.8CVSS9.8AI score0.00264EPSS

CVE•added 2018/06/15 7:29 p.m.•31 views

CVE-2018-12498

spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php.

9.8CVSS9.8AI score0.00264EPSS

CVE•added 2018/10/29 12:29 p.m.•30 views

CVE-2018-18702

spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule because the upfile content is base64 decoded, deserialized, and used for database insertion.

9.8CVSS9.8AI score0.00264EPSS

CVE•added 2018/07/23 8:29 a.m.•28 views

CVE-2018-14514

An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibly have unspecified other impact.

9.8CVSS8AI score0.00482EPSS

CVE•added 2019/01/14 2:29 p.m.•27 views

CVE-2019-6259

An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data_id parameter.

9.8CVSS9.8AI score0.00264EPSS