Show filters
28 Total Results
Displaying 21-28 of 28
Sort by:
Attacker Value
Unknown
CVE-2019-7237
Disclosure Date: January 30, 2019 (last updated November 27, 2024)
An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal.
0
Attacker Value
Unknown
CVE-2019-7234
Disclosure Date: January 30, 2019 (last updated November 27, 2024)
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded via an admincp.php?app=apps&do=pack request.
0
Attacker Value
Unknown
CVE-2019-7160
Disclosure Date: January 29, 2019 (last updated November 27, 2024)
idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execution of arbitrary PHP code from a ZIP file via the admincp.php?app=apps zipfile parameter to apps.admincp.php.
0
Attacker Value
Unknown
CVE-2018-16365
Disclosure Date: September 02, 2018 (last updated November 27, 2024)
An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=group&do=save allows CSRF.
0
Attacker Value
Unknown
CVE-2018-16366
Disclosure Date: September 02, 2018 (last updated November 27, 2024)
An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF.
0
Attacker Value
Unknown
CVE-2018-16332
Disclosure Date: September 02, 2018 (last updated November 27, 2024)
An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability.
0
Attacker Value
Unknown
CVE-2018-16320
Disclosure Date: September 01, 2018 (last updated November 27, 2024)
idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code from a ZIP file.
0
Attacker Value
Unknown
CVE-2018-13865
Disclosure Date: July 10, 2018 (last updated November 27, 2024)
An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.
0
