Idreamsoft Icms vulnerabilities

• idreamsoft icms iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component,... CVE-2026-30661 6.1 MediumMarch 24, 2026
• idreamsoft icms iCMS POST Parameter ConfigAdmincp.php save code injection CVE-2025-15394 5.1 MediumDecember 31, 2025
• idreamsoft icms icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF). CVE-2023-40953 8.8 HighSeptember 8, 2023
• idreamsoft icms iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function. CVE-2023-39806 9.8 CriticalAugust 10, 2023
• idreamsoft icms iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at... CVE-2023-39805 9.8 CriticalAugust 10, 2023
• idreamsoft icms iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter... CVE-2022-41496 9.8 CriticalOctober 13, 2022
• idreamsoft icms In iCMS <=8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files. CVE-2021-44977 7.5 HighFebruary 4, 2022
• idreamsoft icms iCMS <= 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability... CVE-2021-44978 9.8 CriticalFebruary 4, 2022
• idreamsoft icms iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app... CVE-2020-21141 8.8 HighNovember 12, 2021
• idreamsoft icms A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow... CVE-2020-26641 8.8 HighMay 28, 2021
• idreamsoft icms Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands... CVE-2020-18070 9.1 CriticalApril 29, 2021
• idreamsoft icms iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX... CVE-2020-19142 9.8 CriticalDecember 10, 2020
• idreamsoft icms iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME... CVE-2020-19527 9.8 CriticalDecember 10, 2020
• idreamsoft icms A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account.... CVE-2020-24739 6.5 MediumSeptember 10, 2020
• idreamsoft icms idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption... CVE-2019-17583 7.5 HighOctober 14, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL... CVE-2019-17552 9.8 CriticalOctober 14, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF. CVE-2019-16677 6.5 MediumSeptember 21, 2019
• idreamsoft icms An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public... CVE-2019-11427 6.1 MediumApril 21, 2019
• idreamsoft icms An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14... CVE-2019-11426 6.1 MediumApril 21, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users'... CVE-2019-8902 5.7 MediumFebruary 18, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows... CVE-2019-7237 7.5 HighJanuary 30, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php... CVE-2019-7236 7.5 HighJanuary 30, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory... CVE-2019-7235 7.5 HighJanuary 30, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory... CVE-2019-7234 9.1 CriticalJanuary 30, 2019
• idreamsoft icms idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir... CVE-2019-7160 9.8 CriticalJanuary 29, 2019
• idreamsoft icms An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF. CVE-2018-16366 8.8 HighSeptember 2, 2018
• idreamsoft icms An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=group&do=save allows CSRF. CVE-2018-16365 8.8 HighSeptember 2, 2018
• idreamsoft icms An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF... CVE-2018-16332 8.8 HighSeptember 2, 2018
• idreamsoft icms idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution... CVE-2018-16320 7.2 HighSeptember 1, 2018
• idreamsoft icms An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a... CVE-2018-13865 6.1 MediumJuly 10, 2018