Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2023-40833
Disclosure Date: October 12, 2023 (last updated December 08, 2023)
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.
0
Attacker Value
Unknown
CVE-2023-33356
Disclosure Date: May 25, 2023 (last updated February 25, 2025)
IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).
0
Attacker Value
Unknown
CVE-2023-33355
Disclosure Date: May 25, 2023 (last updated February 25, 2025)
IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information.
0
