Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2020-19142
Disclosure Date: December 10, 2020 (last updated February 22, 2025)
iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php.
0
Attacker Value
Unknown
CVE-2020-24739
Disclosure Date: September 10, 2020 (last updated February 22, 2025)
A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRF_TOKEN and can still request normally, all administrators except the initial administrator will be deleted.
0
Attacker Value
Unknown
CVE-2019-16677
Disclosure Date: September 21, 2019 (last updated November 27, 2024)
An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.
0
