Icms Security Vulnerabilities and Issues — Icms CVE List

Lucene search

IdreamsoftIcms

11 matches found

CVE•added 2019/09/21 8:15 p.m.•67 views

CVE-2019-16677

An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.

6.5CVSS6.4AI score0.00098EPSS

CVE•added 2019/10/14 4:15 p.m.•52 views

CVE-2019-17583

idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer.

7.5CVSS7.4AI score0.00807EPSS

CVE•added 2019/01/29 4:29 p.m.•42 views

CVE-2019-7160

idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execution of arbitrary PHP code from a ZIP file via the admincp.php?app=apps zipfile parameter to apps.admincp.php.

9.8CVSS9.4AI score0.01502EPSS

CVE•added 2019/02/18 2:29 p.m.•40 views

CVE-2019-8902

An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.

5.7CVSS5.6AI score0.0008EPSS

CVE•added 2019/10/14 1:15 p.m.•37 views

CVE-2019-17552

An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload.

9.8CVSS9.7AI score0.00307EPSS

CVE•added 2019/01/30 9:29 p.m.•33 views

CVE-2019-7235

An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.

7.5CVSS7.5AI score0.00619EPSS

CVE•added 2019/04/22 11:29 a.m.•32 views

CVE-2019-11427

An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2019/04/22 11:29 a.m.•30 views

CVE-2019-11426

An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2019/01/30 9:29 p.m.•30 views

CVE-2019-7234

An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded...

9.1CVSS8.9AI score0.00702EPSS

CVE•added 2019/01/30 9:29 p.m.•30 views

CVE-2019-7236

An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal.

7.5CVSS7.5AI score0.00431EPSS

CVE•added 2019/01/30 9:29 p.m.•25 views

CVE-2019-7237

An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal.

7.5CVSS7.5AI score0.00431EPSS