Browse CVEs

HIGH 7.5 CVE-2025-22983 An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive informatio… Icecms No fix yet Fix from $1,9502025-01-14 HIGH 7.5 CVE-2025-22984 An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive in… Icecms No fix yet Fix from $1,9502025-01-14 CRITICAL 9.8 CVE-2024-48202 icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile. Icecms after 3.4.7 Fix from $2,3002024-10-30 CRITICAL 9.8 CVE-2024-46612 IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information. Icecms 3.4.7+ Fix from $2,3002024-09-25 HIGH 7.6 CVE-2024-46607 Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password v… Icecms after 3.4.7 Fix from $1,9502024-09-25 HIGH 7.5 CVE-2024-46609 An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and re… Icecms after 3.4.7 Fix from $1,9502024-09-25 HIGH 7.5 CVE-2024-46610 An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' information, including username and password, via a… Icecms after 3.4.7 Fix from $1,9502024-09-25 HIGH 8.8 CVE-2023-6761 A vulnerability, which was classified as problematic, has been found in Thecosy IceCMS up to 2.0.1. This issue affects some unknown processing of the… Icecms No fix yet Fix from $1,9502023-12-13 MEDIUM 5.4 CVE-2023-6760 A vulnerability classified as critical was found in Thecosy IceCMS up to 2.0.1. This vulnerability affects unknown code. The manipulation leads to ma… Icecms No fix yet Fix from $1,6002023-12-13 HIGH 7.5 CVE-2023-6759 A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of t… Icecms No fix yet Fix from $1,9502023-12-13 CRITICAL 9.8 CVE-2023-6756 A vulnerability was found in Thecosy IceCMS 2.0.1. It has been classified as problematic. Affected is an unknown function of the file /login of the c… Icecms No fix yet Fix from $2,3002023-12-13 MEDIUM 6.5 CVE-2023-6757 A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of… Icecms No fix yet Fix from $1,6002023-12-13 MEDIUM 6.1 CVE-2023-6466 A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file /planet o… Icecms No fix yet Fix from $1,6002023-12-02 MEDIUM 5.3 CVE-2023-6438 A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ o… Icecms No fix yet Fix from $1,6002023-11-30 CRITICAL 9.8 CVE-2023-40833 An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting. Icecms Mitigation only Fix from $2,3002023-10-12 MEDIUM 5.4 CVE-2023-33356 IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS). Icecms No fix yet Fix from $1,6002023-05-25 HIGH 7.5 CVE-2023-33355 IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information. Icecms No fix yet Fix from $1,9502023-05-25