Icms@7.0.15 Security Vulnerabilities and Issues — Icms@7.0.15 CVE List

Lucene search

IdreamsoftIcms7.0.15

2 matches found

CVE•added 2019/10/14 4:15 p.m.•52 views

CVE-2019-17583

idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer.

7.5CVSS7.4AI score0.00807EPSS

CVE•added 2021/11/12 10:15 p.m.•25 views

CVE-2020-21141

iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.

8.8CVSS8.8AI score0.00141EPSS