Icms@7.0.9 Security Vulnerabilities and Issues — Icms@7.0.9 CVE List

Lucene search

IdreamsoftIcms7.0.9

2 matches found

CVE•added 2018/09/02 3:29 a.m.•31 views

CVE-2018-16332

An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability.

8.8CVSS8.6AI score0.00145EPSS

CVE•added 2018/07/10 8:29 p.m.•28 views

CVE-2018-13865

An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.

6.1CVSS5.9AI score0.0024EPSS