Vulnerabilities > Icmsdev > Icms > 7.0.16

DATE CVE VULNERABILITY TITLE RISK
2023-09-20 CVE-2023-42321 Cross-Site Request Forgery (CSRF) vulnerability in Icmsdev Icms 7.0.16
Cross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.admincp.php, and group.admincp.php files.
network
low complexity
icmsdev CWE-352
8.8
8.8
2023-09-20 CVE-2023-42322 Session Fixation vulnerability in Icmsdev Icms 7.0.16
Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.
network
low complexity
icmsdev CWE-384
critical
 9.8
9.8