Skip to content
Noroxi

icmsdev records

18 published records for vendor icmsdev.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2018-14514
    39Monitor

    An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibl

    CriticalCVSS 9.8No exploitEPSS 2%

    icmsdev · icmsJul 23, 2018

  • CVE-2019-6259
    39Monitor

    An issue was discovered in idreamsoft iCMS V7.0.13.

    CriticalCVSS 9.8No exploitEPSS 2%

    icmsdev · icmsJan 14, 2019

  • CVE-2018-12498
    39Monitor

    spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    icmsdev · icmsJun 15, 2018

  • CVE-2018-18702
    39Monitor

    spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule because the upfile content is base64 decod

    CriticalCVSS 9.8No exploitEPSS 1%

    icmsdev · icmsOct 29, 2018

  • CVE-2018-9924
    39Monitor

    An issue was discovered in idreamsoft iCMS through 7.0.7.

    CriticalCVSS 9.8No exploitEPSS 1%

    icmsdev · icmsApr 10, 2018

  • CVE-2023-42322
    39Monitor

    Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.

    CriticalCVSS 9.8No exploitEPSS 1%

    icmsdev · icmsSep 20, 2023

  • CVE-2018-16314
    35Monitor

    An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11.

    HighCVSS 8.8No exploitEPSS 1%

    icmsdev · icmsSep 1, 2018

  • CVE-2018-9923
    35Monitor

    An issue was discovered in idreamsoft iCMS through 7.0.7.

    HighCVSS 8.8No exploitEPSS 1%

    icmsdev · icmsApr 10, 2018

  • CVE-2018-10222
    35Monitor

    An issue was discovered in idreamsoft iCMS V7.0.

    HighCVSS 8.8No exploitEPSS 1%

    icmsdev · icmsApr 19, 2018

  • CVE-2018-10117
    35Monitor

    An issue was discovered in idreamsoft iCMS V7.0.7.

    HighCVSS 8.8No exploitEPSS 1%

    icmsdev · icmsApr 16, 2018

  • CVE-2023-42321
    35Monitor

    Cross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admi

    HighCVSS 8.8No exploitEPSS 0%

    icmsdev · icmsSep 20, 2023

  • CVE-2018-15895
    30Monitor

    An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spider_tools.class.php does not blo

    HighCVSS 7.5No exploitEPSS 1%

    icmsdev · icmsAug 27, 2018

  • CVE-2018-14858
    30Monitor

    An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does

    HighCVSS 7.5No exploitEPSS 1%

    icmsdev · icmsAug 2, 2018

  • CVE-2019-14976
    24Monitor

    iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.

    MediumCVSS 6.1No exploitEPSS 1%

    icmsdev · icmsAug 12, 2019

  • CVE-2018-14415
    24Monitor

    An issue was discovered in idreamsoft iCMS before 7.0.10.

    MediumCVSS 6.1No exploitEPSS 1%

    icmsdev · icmsJul 19, 2018

  • CVE-2018-9922
    21Monitor

    An issue was discovered in idreamsoft iCMS through 7.0.7.

    MediumCVSS 5.3No exploitEPSS 1%

    icmsdev · icmsApr 10, 2018

  • CVE-2018-9925
    21Monitor

    An issue was discovered in idreamsoft iCMS through 7.0.7.

    MediumCVSS 5.4No exploitEPSS 1%

    icmsdev · icmsApr 10, 2018

  • CVE-2018-10250
    21Monitor

    iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a WeChat Classified Management keyword search.

    MediumCVSS 5.4No exploitEPSS 1%

    icmsdev · icmsApr 20, 2018