İçeriğe atla
Noroxi

icmsdev kayıtları

icmsdev üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2018-14514
    39İzleyin

    An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibl

    KritikCVSS 9,8İstismar yokEPSS %2

    icmsdev · icms23 Tem 2018

  • CVE-2019-6259
    39İzleyin

    An issue was discovered in idreamsoft iCMS V7.0.13.

    KritikCVSS 9,8İstismar yokEPSS %2

    icmsdev · icms14 Oca 2019

  • CVE-2018-12498
    39İzleyin

    spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    icmsdev · icms15 Haz 2018

  • CVE-2018-18702
    39İzleyin

    spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule because the upfile content is base64 decod

    KritikCVSS 9,8İstismar yokEPSS %1

    icmsdev · icms29 Eki 2018

  • CVE-2018-9924
    39İzleyin

    An issue was discovered in idreamsoft iCMS through 7.0.7.

    KritikCVSS 9,8İstismar yokEPSS %1

    icmsdev · icms10 Nis 2018

  • CVE-2023-42322
    39İzleyin

    Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.

    KritikCVSS 9,8İstismar yokEPSS %1

    icmsdev · icms20 Eyl 2023

  • CVE-2018-16314
    35İzleyin

    An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11.

    YüksekCVSS 8,8İstismar yokEPSS %1

    icmsdev · icms1 Eyl 2018

  • CVE-2018-9923
    35İzleyin

    An issue was discovered in idreamsoft iCMS through 7.0.7.

    YüksekCVSS 8,8İstismar yokEPSS %1

    icmsdev · icms10 Nis 2018

  • CVE-2018-10222
    35İzleyin

    An issue was discovered in idreamsoft iCMS V7.0.

    YüksekCVSS 8,8İstismar yokEPSS %1

    icmsdev · icms19 Nis 2018

  • CVE-2018-10117
    35İzleyin

    An issue was discovered in idreamsoft iCMS V7.0.7.

    YüksekCVSS 8,8İstismar yokEPSS %1

    icmsdev · icms16 Nis 2018

  • CVE-2023-42321
    35İzleyin

    Cross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admi

    YüksekCVSS 8,8İstismar yokEPSS %0

    icmsdev · icms20 Eyl 2023

  • CVE-2018-15895
    30İzleyin

    An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spider_tools.class.php does not blo

    YüksekCVSS 7,5İstismar yokEPSS %1

    icmsdev · icms27 Ağu 2018

  • CVE-2018-14858
    30İzleyin

    An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does

    YüksekCVSS 7,5İstismar yokEPSS %1

    icmsdev · icms2 Ağu 2018

  • CVE-2019-14976
    24İzleyin

    iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.

    OrtaCVSS 6,1İstismar yokEPSS %1

    icmsdev · icms12 Ağu 2019

  • CVE-2018-14415
    24İzleyin

    An issue was discovered in idreamsoft iCMS before 7.0.10.

    OrtaCVSS 6,1İstismar yokEPSS %1

    icmsdev · icms19 Tem 2018

  • CVE-2018-9922
    21İzleyin

    An issue was discovered in idreamsoft iCMS through 7.0.7.

    OrtaCVSS 5,3İstismar yokEPSS %1

    icmsdev · icms10 Nis 2018

  • CVE-2018-9925
    21İzleyin

    An issue was discovered in idreamsoft iCMS through 7.0.7.

    OrtaCVSS 5,4İstismar yokEPSS %1

    icmsdev · icms10 Nis 2018

  • CVE-2018-10250
    21İzleyin

    iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a WeChat Classified Management keyword search.

    OrtaCVSS 5,4İstismar yokEPSS %1

    icmsdev · icms20 Nis 2018