| Package | Affected versions | Patched versions |
|---|---|---|
| icms | = 7.0.11 |
spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule because the upfile content is base64 decoded, deserialized, and used for database insertion.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free