Vulnerabilities > Idreamsoft > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-08-10 CVE-2023-39805 SQL Injection vulnerability in Idreamsoft Icms 7.0.16
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.
network
low complexity
idreamsoft CWE-89
critical
 9.8
9.8
2023-08-10 CVE-2023-39806 SQL Injection vulnerability in Idreamsoft Icms 7.0.16
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.
network
low complexity
idreamsoft CWE-89
critical
 9.8
9.8
2022-10-13 CVE-2022-41496 Server-Side Request Forgery (SSRF) vulnerability in Idreamsoft Icms 7.0.16
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.
network
low complexity
idreamsoft CWE-918
critical
 9.8
9.8
2020-12-10 CVE-2020-19527 OS Command Injection vulnerability in Idreamsoft Icms 7.0.14
iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.
network
low complexity
idreamsoft CWE-78
critical
 10.0
10
2020-12-10 CVE-2020-19142 OS Command Injection vulnerability in Idreamsoft Icms 7.0.0
iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php.
network
low complexity
idreamsoft CWE-78
critical
 10.0
10