idreamsoft/iCMS

GitHub

github.com

www.icmsdev.com

Releases0

Stars15

iCMS 是一套采用 PHP 和 MySQL 构建的高效简洁的内容管理系统,为您的网站提供一个完美的开源解决方案

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-18070 ↗	Apr 30, 2021Friday, 30 April 2021, 00:15	9.1 CRITICAL	6.4 MEDIUM
Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()" method of the component "database.admincp.php".
CVE-2020-19527 ↗	Dec 10, 2020Thursday, 10 December 2020, 23:15	9.8 CRITICAL	10 HIGH
iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.
CVE-2020-19142 ↗	Dec 10, 2020Thursday, 10 December 2020, 23:15	9.8 CRITICAL	10 HIGH
iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php.
CVE-2020-24739 ↗	Sep 10, 2020Thursday, 10 September 2020, 14:15	6.5 MEDIUM	4.3 MEDIUM
A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account. When missing the CSRF_TOKEN and can still request normally, all administrators except the initial administrator will be deleted.
CVE-2019-17583 ↗	Oct 14, 2019Monday, 14 October 2019, 16:15	7.5 HIGH	5 MEDIUM
idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer.
CVE-2019-17552 ↗	Oct 14, 2019Monday, 14 October 2019, 13:15	9.8 CRITICAL	7.5 HIGH
An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload.
CVE-2019-16677 ↗	Sep 21, 2019Saturday, 21 September 2019, 20:15	6.5 MEDIUM	5.8 MEDIUM
An issue was discovered in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.
CVE-2019-14976 ↗	Aug 12, 2019Monday, 12 August 2019, 22:15	—	4.3 MEDIUM
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter.
CVE-2019-11427 ↗	Apr 22, 2019Monday, 22 April 2019, 11:29	—	4.3 MEDIUM
An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter.
CVE-2019-11426 ↗	Apr 22, 2019Monday, 22 April 2019, 11:29	—	4.3 MEDIUM
An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.
CVE-2019-8902 ↗	Feb 18, 2019Monday, 18 February 2019, 14:29	—	4.9 MEDIUM
An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.
CVE-2019-7237 ↗	Jan 30, 2019Wednesday, 30 January 2019, 21:29	—	5 MEDIUM
An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal.
CVE-2019-7234 ↗	Jan 30, 2019Wednesday, 30 January 2019, 21:29	—	6.4 MEDIUM
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded via an admincp.php?app=apps&do=pack request.
CVE-2019-7235 ↗	Jan 30, 2019Wednesday, 30 January 2019, 21:29	—	6.4 MEDIUM
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.
CVE-2019-7236 ↗	Jan 30, 2019Wednesday, 30 January 2019, 21:29	—	5 MEDIUM
An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal.
CVE-2019-7160 ↗	Jan 29, 2019Tuesday, 29 January 2019, 16:29	—	7.5 HIGH
idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execution of arbitrary PHP code from a ZIP file via the admincp.php?app=apps zipfile parameter to apps.admincp.php.
CVE-2019-6259 ↗	Jan 14, 2019Monday, 14 January 2019, 14:29	—	7.5 HIGH
An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data_id parameter.
CVE-2018-18702 ↗	Oct 29, 2018Monday, 29 October 2018, 12:29	—	7.5 HIGH
spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule because the upfile content is base64 decoded, deserialized, and used for database insertion.
CVE-2018-16366 ↗	Sep 2, 2018Sunday, 2 September 2018, 22:29	—	6.8 MEDIUM
An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF.
CVE-2018-16365 ↗	Sep 2, 2018Sunday, 2 September 2018, 22:29	—	6.8 MEDIUM
An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=group&do=save allows CSRF.
CVE-2018-16332 ↗	Sep 2, 2018Sunday, 2 September 2018, 03:29	—	6.8 MEDIUM
An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability.
CVE-2018-16314 ↗	Sep 1, 2018Saturday, 1 September 2018, 18:29	—	6.8 MEDIUM
An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11. When verifying CSRF_TOKEN, if CSRF_TOKEN does not exist, only the Referer header is validated, which can be bypassed via an admincp.php substring in this header.
CVE-2018-16320 ↗	Sep 1, 2018Saturday, 1 September 2018, 18:29	—	6.5 MEDIUM
idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code from a ZIP file.
CVE-2018-15895 ↗	Aug 27, 2018Monday, 27 August 2018, 04:29	—	5 MEDIUM
An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spider_tools.class.php does not block DNS hostnames associated with private and reserved IP addresses, as demonstrated by 127.0.0.1 in an A record. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14858.
CVE-2018-14858 ↗	Aug 2, 2018Thursday, 2 August 2018, 20:29	—	5 MEDIUM
An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not block private and reserved IP addresses such as 10.0.0.0/8. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14514.
CVE-2018-14514 ↗	Jul 23, 2018Monday, 23 July 2018, 08:29	—	7.5 HIGH
An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibly have unspecified other impact.
CVE-2018-14415 ↗	Jul 20, 2018Friday, 20 July 2018, 01:29	—	4.3 MEDIUM
An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen.
CVE-2018-13865 ↗	Jul 10, 2018Tuesday, 10 July 2018, 20:29	—	4.3 MEDIUM
An issue was discovered in idreamsoft iCMS 7.0.9. XSS exists via the callback parameter in a public/api.php uploadpic request, bypassing the iWAF protection mechanism.
CVE-2018-12498 ↗	Jun 15, 2018Friday, 15 June 2018, 19:29	—	7.5 HIGH
spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php.
CVE-2018-10250 ↗	Apr 20, 2018Friday, 20 April 2018, 18:29	—	3.5 LOW
iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a WeChat Classified Management keyword search.
CVE-2018-10222 ↗	Apr 19, 2018Thursday, 19 April 2018, 08:29	—	6.8 MEDIUM
An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=article_category&do=save&frame=iPHP.
CVE-2018-10117 ↗	Apr 16, 2018Monday, 16 April 2018, 09:58	—	6.8 MEDIUM
An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admincp.php?app=members&do=save&frame=iPHP.
CVE-2018-9922 ↗	Apr 10, 2018Tuesday, 10 April 2018, 06:29	—	5 MEDIUM
An issue was discovered in idreamsoft iCMS through 7.0.7. Physical path leakage exists via an invalid nickname field that reveals a core/library/weixin.class.php pathname.
CVE-2018-9923 ↗	Apr 10, 2018Tuesday, 10 April 2018, 06:29	—	6.8 MEDIUM
An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request.
CVE-2018-9924 ↗	Apr 10, 2018Tuesday, 10 April 2018, 06:29	—	7.5 HIGH
An issue was discovered in idreamsoft iCMS through 7.0.7. SQL injection exists via the pid array parameter in an admincp.php?app=tag&do=save&frame=iPHP request.
CVE-2018-9925 ↗	Apr 10, 2018Tuesday, 10 April 2018, 06:29	—	3.5 LOW
An issue was discovered in idreamsoft iCMS through 7.0.7. XSS exists via the nickname field in an admincp.php?app=user&do=save&frame=iPHP request.