Advisories · Technology
Thecosy IceCMS.
Every CVE that names Thecosy IceCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum
- Thecosy IceCMS
- SQL injection
- CVSS 8.7 High
IceCMS through 4.1.5 SQL Injection via /WebResource/findresourcebynum
- Thecosy IceCMS
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints
- Thecosy IceCMS
- Authentication bypass
- CVSS 5.4 Medium
Thecosy IceCMS Article permission
- Thecosy IceCMS
- CWE-275
- CVSS 4.3 Medium
Thecosy IceCMS User Data access control
- Thecosy IceCMS
- Broken access control
- CVSS 6.3 Medium
Thecosy IceCMS user session
- Thecosy IceCMS
- CWE-1018
- CVSS 5.3 Medium
Thecosy IceCMS Love resource improper enforcement of a single, unique action
- Thecosy IceCMS
- CWE-837
- CVSS 5.3 Medium
Thecosy IceCMS API PlanetCommentList access control
- Thecosy IceCMS
- Broken access control
- CVSS 5.3 Medium
Thecosy IceCMS API PlanetUser information disclosure
- Thecosy IceCMS
- Information disclosure
- CVSS 5.3 Medium
Thecosy IceCMS Captcha login excessive authentication
- Thecosy IceCMS
- Authentication bypass
- CVSS 3.1 Low
Thecosy IceCMS Comment Like improper enforcement of a single, unique action
- Thecosy IceCMS
- CWE-837
- CVSS 3.5 Low
Thecosy IceCMS User Comment planet cross site scripting
- Thecosy IceCMS
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Thecosy IceCMS Like improper enforcement of a single, unique action
- Thecosy IceCMS
- CWE-837