Vulnerability index

Browse CVEs

11 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Icms CRITICAL 9.8
CVE-2023-42322

Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.

Mitigation only
Fix from $2,300 2023-09-20
Icms HIGH 8.8
CVE-2023-42321

Cross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, …

Mitigation only
Fix from $1,950 2023-09-20
Icms MEDIUM 6.1
CVE-2019-14976

iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.

No fix yet
Fix from $1,600 2019-08-12
Icms CRITICAL 9.8
CVE-2019-6259

An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data_id parameter.

No fix yet
Fix from $2,300 2019-01-14
Icms CRITICAL 9.8
CVE-2018-18702

spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule because the upfile content is base64 decoded, deser…

No fix yet
Fix from $2,300 2018-10-29
Icms HIGH 8.8
CVE-2018-16314

An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11. When verifying CSRF_TOKEN, if CSRF_TOKEN does not exist, only the Referer header is…

No fix yet
Fix from $1,950 2018-09-01
Icms CRITICAL 9.8
CVE-2018-14514

An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibly have un…

No fix yet
Fix from $2,300 2018-07-23
Icms CRITICAL 9.8
CVE-2018-12498

spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php.

No fix yet
Fix from $2,300 2018-06-15
Icms MEDIUM 5.4
CVE-2018-10250

iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a WeChat Classified Management keyword search.

No fix yet
Fix from $1,600 2018-04-20
Icms HIGH 8.8
CVE-2018-10222

An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=article_category&do=save&fr…

No fix yet
Fix from $1,950 2018-04-19
Icms HIGH 8.8
CVE-2018-10117

An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admincp.php?app=members&do=save&fr…

No fix yet
Fix from $1,950 2018-04-16