İçeriğe atla
Noroxi

Thecosy kayıtları

thecosy üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

20 kayıt
  • CVE-2023-6756
    39İzleyin

    Thecosy IceCMS Captcha login excessive authentication

    KritikCVSS 9,8İstismar yokEPSS %1

    thecosy · icecms13 Ara 2023

  • CVE-2023-40833
    39İzleyin

    An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.

    KritikCVSS 9,8İstismar yokEPSS %0

    thecosy · icecms12 Eki 2023

  • CVE-2024-48202
    39İzleyin

    icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile.

    KritikCVSS 9,8İstismar yokEPSS %0

    thecosy · icecms30 Eki 2024

  • CVE-2024-46612
    39İzleyin

    IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information.

    KritikCVSS 9,8İstismar yokEPSS %0

    thecosy · icecms24 Eyl 2024

  • CVE-2023-6761
    35İzleyin

    Thecosy IceCMS User Data access control

    YüksekCVSS 8,8İstismar yokEPSS %0

    thecosy · icecms13 Ara 2023

  • CVE-2023-6759
    30İzleyin

    Thecosy IceCMS Love resource improper enforcement of a single, unique action

    YüksekCVSS 7,5İstismar yokEPSS %0

    thecosy · icecms13 Ara 2023

  • CVE-2024-46609
    30İzleyin

    An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to acce

    YüksekCVSS 7,5İstismar yokEPSS %0

    thecosy · icecms24 Eyl 2024

  • CVE-2023-33355
    30İzleyin

    IceCMS v1.0.0 has Insecure Permissions.

    YüksekCVSS 7,5İstismar yokEPSS %0

    thecosy · icecms25 May 2023

  • CVE-2024-46607
    30İzleyin

    Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and p

    YüksekCVSS 7,6İstismar yokEPSS %0

    thecosy · icecms24 Eyl 2024

  • CVE-2025-22984
    30İzleyin

    An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sen

    YüksekCVSS 7,5İstismar yokEPSS %0

    thecosy · icecms14 Oca 2025

  • CVE-2025-22983
    30İzleyin

    An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive i

    YüksekCVSS 7,5İstismar yokEPSS %0

    thecosy · icecms14 Oca 2025

  • CVE-2024-46610
    30İzleyin

    An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' information, including username and passwo

    YüksekCVSS 7,5İstismar yokEPSS %0

    thecosy · icecms24 Eyl 2024

  • CVE-2023-6757
    26İzleyin

    Thecosy IceCMS API PlanetUser information disclosure

    OrtaCVSS 6,5İstismar yokEPSS %0

    thecosy · icecms13 Ara 2023

  • CVE-2023-6466
    24İzleyin

    Thecosy IceCMS User Comment planet cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    thecosy · icecms2 Ara 2023

  • CVE-2023-6438
    21İzleyin

    Thecosy IceCMS Like improper enforcement of a single, unique action

    OrtaCVSS 5,3İstismar yokEPSS %0

    thecosy · icecms30 Kas 2023

  • CVE-2023-6760
    21İzleyin

    Thecosy IceCMS user session

    OrtaCVSS 5,4İstismar yokEPSS %0

    thecosy · icecms13 Ara 2023

  • CVE-2023-33356
    21İzleyin

    IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 5,4İstismar yokEPSS %0

    thecosy · icecms25 May 2023

  • CVE-2023-6758
    17İzleyin

    Thecosy IceCMS API PlanetCommentList access control

    OrtaCVSS 4,3İstismar yokEPSS %0

    thecosy · icecms13 Ara 2023

  • CVE-2023-6762
    17İzleyin

    Thecosy IceCMS Article permission

    OrtaCVSS 4,3İstismar yokEPSS %0

    thecosy · icecms13 Ara 2023

  • CVE-2023-6467
    14İzleyin

    Thecosy IceCMS Comment Like improper enforcement of a single, unique action

    DüşükCVSS 3,7İstismar yokEPSS %0

    thecosy · icecms2 Ara 2023