Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
IdreamsoftIcms

28 matches found

CVE
CVE•added 2019/09/21 8:15 p.m.•67 views

CVE-2019-16677

An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.

6.5CVSS6.4AI score0.00098EPSS
CVE
CVE•added 2021/05/28 8:15 p.m.•60 views

CVE-2020-26641

A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scripts.

8.8CVSS8.8AI score0.00145EPSS
CVE
CVE•added 2019/10/14 4:15 p.m.•52 views

CVE-2019-17583

idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer.

7.5CVSS7.4AI score0.00807EPSS
CVE
CVE•added 2021/04/30 12:15 a.m.•47 views

CVE-2020-18070

Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()" method of the component "database.admincp.php".

9.1CVSS9AI score0.04312EPSS
CVE
CVE•added 2019/01/29 4:29 p.m.•42 views

CVE-2019-7160

idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execution of arbitrary PHP code from a ZIP file via the admincp.php?app=apps zipfile parameter to apps.admincp.php.

9.8CVSS9.4AI score0.01502EPSS
CVE
CVE•added 2019/02/18 2:29 p.m.•40 views

CVE-2019-8902

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.

5.7CVSS5.6AI score0.0008EPSS
CVE
CVE•added 2022/02/04 4:15 p.m.•39 views

CVE-2021-44978

iCMS

9.8CVSS9.7AI score0.02668EPSS
CVE
CVE•added 2019/10/14 1:15 p.m.•37 views

CVE-2019-17552

An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload.

9.8CVSS9.7AI score0.00307EPSS
CVE
CVE•added 2022/02/04 4:15 p.m.•37 views

CVE-2021-44977

In iCMS

7.5CVSS7.4AI score0.00524EPSS
CVE
CVE•added 2022/10/13 9:15 p.m.•35 views

CVE-2022-41496

iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.

9.8CVSS9.5AI score0.00107EPSS
CVE
CVE•added 2023/08/10 8:15 p.m.•34 views

CVE-2023-39805

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.

9.8CVSS9.7AI score0.00073EPSS
CVE
CVE•added 2023/08/10 8:15 p.m.•34 views

CVE-2023-39806

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.

9.8CVSS9.8AI score0.00073EPSS
CVE
CVE•added 2019/01/30 9:29 p.m.•33 views

CVE-2019-7235

An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.

7.5CVSS7.5AI score0.00619EPSS
CVE
CVE•added 2019/04/22 11:29 a.m.•32 views

CVE-2019-11427

An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter.

6.1CVSS5.9AI score0.0024EPSS
CVE
CVE•added 2020/12/10 11:15 p.m.•32 views

CVE-2020-19527

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.

10CVSS9.7AI score0.00394EPSS
CVE
CVE•added 2018/09/02 3:29 a.m.•31 views

CVE-2018-16332

An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability.

8.8CVSS8.6AI score0.00145EPSS
CVE
CVE•added 2023/09/08 3:15 a.m.•31 views

CVE-2023-40953

icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF).

8.8CVSS8.7AI score0.0007EPSS
CVE
CVE•added 2018/09/02 10:29 p.m.•30 views

CVE-2018-16365

An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=group&do=save allows CSRF.

8.8CVSS8.6AI score0.00145EPSS
CVE
CVE•added 2019/04/22 11:29 a.m.•30 views

CVE-2019-11426

An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.

6.1CVSS5.9AI score0.0024EPSS
CVE
CVE•added 2019/01/30 9:29 p.m.•30 views

CVE-2019-7234

An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded...

9.1CVSS8.9AI score0.00702EPSS
CVE
CVE•added 2019/01/30 9:29 p.m.•30 views

CVE-2019-7236

An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal.

7.5CVSS7.5AI score0.00431EPSS
CVE
CVE•added 2018/07/10 8:29 p.m.•28 views

CVE-2018-13865

An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.

6.1CVSS5.9AI score0.0024EPSS
CVE
CVE•added 2018/09/02 10:29 p.m.•28 views

CVE-2018-16366

An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF.

8.8CVSS8.6AI score0.00145EPSS
CVE
CVE•added 2018/09/01 6:29 p.m.•26 views

CVE-2018-16320

idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code from a ZIP file.

7.2CVSS7.2AI score0.00845EPSS
CVE
CVE•added 2020/12/10 11:15 p.m.•26 views

CVE-2020-19142

iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php.

10CVSS9.7AI score0.00394EPSS
CVE
CVE•added 2019/01/30 9:29 p.m.•25 views

CVE-2019-7237

An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal.

7.5CVSS7.5AI score0.00431EPSS
CVE
CVE•added 2021/11/12 10:15 p.m.•25 views

CVE-2020-21141

iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.

8.8CVSS8.8AI score0.00141EPSS
CVE
CVE•added 2020/09/10 2:15 p.m.•25 views

CVE-2020-24739

A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRF_TOKEN and can still request normally, all administrators except the initial administrator will be deleted.

6.5CVSS6.5AI score0.00098EPSS