Icmsdev Icms vulnerabilities

• icmsdev icms Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain... CVE-2023-42322 9.8 CriticalSeptember 20, 2023
• icmsdev icms Cross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker... CVE-2023-42321 8.8 HighSeptember 20, 2023
• icmsdev icms iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter. CVE-2019-14976 6.1 MediumAugust 12, 2019
• icmsdev icms An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article... CVE-2019-6259 9.8 CriticalJanuary 14, 2019
• icmsdev icms spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule... CVE-2018-18702 9.8 CriticalOctober 27, 2018
• icmsdev icms An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11. When verifying CSRF_TOKEN, if... CVE-2018-16314 8.8 HighSeptember 1, 2018
• icmsdev icms An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app... CVE-2018-15895 7.5 HighAugust 27, 2018
• icmsdev icms An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote... CVE-2018-14858 7.5 HighAugust 2, 2018
• icmsdev icms An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read... CVE-2018-14514 9.8 CriticalJuly 23, 2018
• icmsdev icms An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth... CVE-2018-14415 6.1 MediumJuly 19, 2018
• icmsdev icms spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do... CVE-2018-12498 9.8 CriticalJune 15, 2018
• icmsdev icms iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a... CVE-2018-10250 5.4 MediumApril 20, 2018
• icmsdev icms An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a... CVE-2018-10222 8.8 HighApril 19, 2018
• icmsdev icms An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an... CVE-2018-10117 8.8 HighApril 15, 2018
• icmsdev icms An issue was discovered in idreamsoft iCMS through 7.0.7. XSS exists via the nickname field in an... CVE-2018-9925 5.4 MediumApril 10, 2018
• icmsdev icms An issue was discovered in idreamsoft iCMS through 7.0.7. SQL injection exists via the pid array... CVE-2018-9924 9.8 CriticalApril 10, 2018
• icmsdev icms An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as... CVE-2018-9923 8.8 HighApril 10, 2018
• icmsdev icms An issue was discovered in idreamsoft iCMS through 7.0.7. Physical path leakage exists via an... CVE-2018-9922 5.3 MediumApril 10, 2018