Icms@7.0.14 Security Vulnerabilities and Issues — Icms@7.0.14 CVE List

Lucene search

IdreamsoftIcms7.0.14

4 matches found

CVE•added 2019/10/14 1:15 p.m.•37 views

CVE-2019-17552

An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload.

9.8CVSS9.7AI score0.00307EPSS

CVE•added 2019/04/22 11:29 a.m.•32 views

CVE-2019-11427

An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2020/12/10 11:15 p.m.•32 views

CVE-2020-19527

iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.

10CVSS9.7AI score0.00394EPSS

CVE•added 2019/04/22 11:29 a.m.•30 views

CVE-2019-11426

An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.

6.1CVSS5.9AI score0.0024EPSS