Browse CVEs

HIGH 7.5 CVE-2025-22983 An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive informatio… Icecms No fix yet Fix from $1,9502025-01-14 HIGH 7.5 CVE-2025-22984 An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive in… Icecms No fix yet Fix from $1,9502025-01-14 HIGH 8.8 CVE-2023-6761 A vulnerability, which was classified as problematic, has been found in Thecosy IceCMS up to 2.0.1. This issue affects some unknown processing of the… Icecms No fix yet Fix from $1,9502023-12-13 MEDIUM 5.4 CVE-2023-6760 A vulnerability classified as critical was found in Thecosy IceCMS up to 2.0.1. This vulnerability affects unknown code. The manipulation leads to ma… Icecms No fix yet Fix from $1,6002023-12-13 HIGH 7.5 CVE-2023-6759 A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of t… Icecms No fix yet Fix from $1,9502023-12-13 CRITICAL 9.8 CVE-2023-6756 A vulnerability was found in Thecosy IceCMS 2.0.1. It has been classified as problematic. Affected is an unknown function of the file /login of the c… Icecms No fix yet Fix from $2,3002023-12-13 MEDIUM 6.5 CVE-2023-6757 A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of… Icecms No fix yet Fix from $1,6002023-12-13 MEDIUM 6.1 CVE-2023-6466 A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file /planet o… Icecms No fix yet Fix from $1,6002023-12-02 MEDIUM 5.3 CVE-2023-6438 A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ o… Icecms No fix yet Fix from $1,6002023-11-30 CRITICAL 9.8 CVE-2023-40833 An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting. Icecms Mitigation only Fix from $2,3002023-10-12 MEDIUM 5.4 CVE-2023-33356 IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS). Icecms No fix yet Fix from $1,6002023-05-25 HIGH 7.5 CVE-2023-33355 IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information. Icecms No fix yet Fix from $1,9502023-05-25