Icms Security Vulnerabilities and Issues — Icms CVE List | Vulners.com

Lucene search

K

IdreamsoftIcms

5 matches found

CVE•added 2019/09/21 8:15 p.m.•67 views

CVE-2019-16677

An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.

6.5CVSS6.4AI score0.00098EPSS

CVE•added 2019/04/22 11:29 a.m.•32 views

CVE-2019-11427

An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2019/04/22 11:29 a.m.•30 views

CVE-2019-11426

An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2018/07/10 8:29 p.m.•28 views

CVE-2018-13865

An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2020/09/10 2:15 p.m.•25 views

CVE-2020-24739

A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRF_TOKEN and can still request normally, all administrators except the initial administrator will be deleted.

6.5CVSS6.5AI score0.00098EPSS