VendorsiDreamSofticms7.0.16
Vulnerabilities

iDreamSoft iCMS 7.0.16

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2022-41496
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.
Published 2022-10-13 · Modified
9.8EPSS 0.010
CVE-2023-39805
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.
Published 2023-08-10 · Modified
9.8EPSS 0.006
CVE-2023-39806
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.
Published 2023-08-10 · Modified
9.8EPSS 0.006
CVE-2020-26641
A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scripts.
Published 2021-05-28 · Modified
8.8EPSS 0.005
CVE-2023-40953
icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF).
Published 2023-09-08 · Modified
8.8EPSS 0.003