Filter
-Infinity
0

iceCMSAn access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthe…

7.5
EPSS
0.04%
First published (updated )

iceCMSAn access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows…

7.5
EPSS
0.04%
First published (updated )

iceCMSMalicious File Upload

First published (updated )

iCMSAn access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' in…

7.5
First published (updated )

iceCMSIncorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering an…

7.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iceCMSAn access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before …

7.5
First published (updated )

iceCMSIceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forg…

First published (updated )

iCMSThecosy IceCMS Article permission

EPSS
0.05%
First published (updated )

iCMSThecosy IceCMS User Data access control

8.8
EPSS
0.06%
First published (updated )

iCMSThecosy IceCMS user session

EPSS
0.05%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iCMSThecosy IceCMS Love resource improper enforcement of a single, unique action

7.5
EPSS
0.05%
First published (updated )

iCMSThecosy IceCMS API PlanetCommentList access control

EPSS
0.05%
First published (updated )

iCMSThecosy IceCMS API PlanetUser information disclosure

EPSS
0.06%
First published (updated )

iCMSThecosy IceCMS Captcha login excessive authentication

EPSS
0.06%
First published (updated )

iCMSThecosy IceCMS Comment Like improper enforcement of a single, unique action

3.7
EPSS
0.05%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iCMSThecosy IceCMS User Comment planet cross site scripting

EPSS
0.05%
First published (updated )

iCMSThecosy IceCMS Like improper enforcement of a single, unique action

EPSS
0.05%
First published (updated )

IcecmsAn issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key pa…

First published (updated )

iCMSCSRF

8.8
First published (updated )

iCMSSQL Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iCMSSQL Injection

First published (updated )

IcecmsIceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the di…

7.5
First published (updated )

IcecmsXSS

First published (updated )

iCMSSSRF

First published (updated )

iCMSPath Traversal

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iCMSCode Injection

First published (updated )

iCMSCSRF

8.8
First published (updated )

iCMSCSRF

8.8
First published (updated )

iCMSPath Traversal

First published (updated )

iCMSOS Command Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203