Browse CVEs

CRITICAL 9.8 CVE-2023-42322 Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information. Icms Mitigation only Fix from $2,3002023-09-20 HIGH 8.8 CVE-2023-42321 Cross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, … Icms Mitigation only Fix from $1,9502023-09-20 MEDIUM 6.1 CVE-2019-14976 iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter. Icms No fix yet Fix from $1,6002019-08-12 CRITICAL 9.8 CVE-2019-6259 An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data_id parameter. Icms No fix yet Fix from $2,3002019-01-14 CRITICAL 9.8 CVE-2018-18702 spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule because the upfile content is base64 decoded, deser… Icms No fix yet Fix from $2,3002018-10-29 HIGH 8.8 CVE-2018-16314 An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11. When verifying CSRF_TOKEN, if CSRF_TOKEN does not exist, only the Referer header is… Icms No fix yet Fix from $1,9502018-09-01 HIGH 7.5 CVE-2018-15895 An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spider_tools.class.php does not block DNS ho… Icms 7.0.11+ Fix from $1,9502018-08-27 HIGH 7.5 CVE-2018-14858 An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not bloc… Icms 7.0.11+ Fix from $1,9502018-08-02 CRITICAL 9.8 CVE-2018-14514 An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibly have un… Icms No fix yet Fix from $2,3002018-07-23 MEDIUM 6.1 CVE-2018-14415 An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add scree… Icms 7.0.10+ Fix from $1,6002018-07-20 CRITICAL 9.8 CVE-2018-12498 spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php. Icms No fix yet Fix from $2,3002018-06-15 MEDIUM 5.4 CVE-2018-10250 iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a WeChat Classified Management keyword search. Icms No fix yet Fix from $1,6002018-04-20 HIGH 8.8 CVE-2018-10222 An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=article_category&do=save&fr… Icms No fix yet Fix from $1,9502018-04-19 HIGH 8.8 CVE-2018-10117 An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admincp.php?app=members&do=save&fr… Icms No fix yet Fix from $1,9502018-04-16 CRITICAL 9.8 CVE-2018-9924 An issue was discovered in idreamsoft iCMS through 7.0.7. SQL injection exists via the pid array parameter in an admincp.php?app=tag&do=save&frame=iP… Icms after 7.0.7 Fix from $2,3002018-04-10 HIGH 8.8 CVE-2018-9923 An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save… Icms after 7.0.7 Fix from $1,9502018-04-10 MEDIUM 5.4 CVE-2018-9925 An issue was discovered in idreamsoft iCMS through 7.0.7. XSS exists via the nickname field in an admincp.php?app=user&do=save&frame=iPHP request. Icms after 7.0.7 Fix from $1,6002018-04-10 MEDIUM 5.3 CVE-2018-9922 An issue was discovered in idreamsoft iCMS through 7.0.7. Physical path leakage exists via an invalid nickname field that reveals a core/library/weix… Icms after 7.0.7 Fix from $1,6002018-04-10