Thecosy Icecms vulnerabilities

• thecosy icecms IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum CVE-2026-111686 8.7 HighOctober 16, 2026
• thecosy icecms IceCMS through 4.1.5 SQL Injection via /WebResource/findresourcebynum CVE-2026-111685 8.7 HighOctober 16, 2026
• thecosy icecms IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints CVE-2026-111673 9.3 CriticalOctober 16, 2026
• thecosy icecms An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0... CVE-2025-22984 7.5 HighJanuary 14, 2025
• thecosy icecms An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows... CVE-2025-22983 7.5 HighJanuary 14, 2025
• thecosy icecms icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile. CVE-2024-48202 9.8 CriticalOctober 30, 2024
• icecms project icecms IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to... CVE-2024-46612 9.8 CriticalSeptember 24, 2024
• thecosy icecms An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users'... CVE-2024-46610 7.5 HighSeptember 24, 2024
• icecms project icecms An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and... CVE-2024-46609 7.5 HighSeptember 24, 2024
• thecosy icecms Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering... CVE-2024-46607 7.6 HighSeptember 24, 2024
• thecosy icecms Thecosy IceCMS Article permission CVE-2023-6762 5.4 MediumDecember 13, 2023
• thecosy icecms Thecosy IceCMS User Data access control CVE-2023-6761 4.3 MediumDecember 13, 2023
• thecosy icecms Thecosy IceCMS user session CVE-2023-6760 6.3 MediumDecember 13, 2023
• thecosy icecms Thecosy IceCMS Love resource improper enforcement of a single, unique action CVE-2023-6759 5.3 MediumDecember 13, 2023
• thecosy icecms Thecosy IceCMS API PlanetCommentList access control CVE-2023-6758 5.3 MediumDecember 13, 2023
• thecosy icecms Thecosy IceCMS API PlanetUser information disclosure CVE-2023-6757 5.3 MediumDecember 13, 2023
• thecosy icecms Thecosy IceCMS Captcha login excessive authentication CVE-2023-6756 5.3 MediumDecember 13, 2023
• thecosy icecms Thecosy IceCMS Comment Like improper enforcement of a single, unique action CVE-2023-6467 3.1 LowDecember 2, 2023
• thecosy icecms Thecosy IceCMS User Comment planet cross site scripting CVE-2023-6466 3.5 LowDecember 2, 2023
• thecosy icecms Thecosy IceCMS Like improper enforcement of a single, unique action CVE-2023-6438 4.3 MediumNovember 30, 2023
• thecosy icecms An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key... CVE-2023-40833 9.8 CriticalOctober 12, 2023
• thecosy icecms IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS). CVE-2023-33356 5.4 MediumMay 25, 2023
• thecosy icecms IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the... CVE-2023-33355 7.5 HighMay 25, 2023