CVE-2018-18702

概要

参考情報

• idreamsoft/iCMS · Exploit

icms のその他の脆弱性

• CVE-2023-42322緊急 9.8Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.
• CVE-2023-42321高 8.8Cross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admi…
• CVE-2019-14976中 6.1iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.
• CVE-2019-6259緊急 9.8An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data_id parameter.
• CVE-2018-16314高 8.8An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11. When verifying CSRF_TOKEN, if CSRF_TOKEN does not exist, only the Referer …