Vulnerabilities > Idreamsoft > High

DATE CVE VULNERABILITY TITLE RISK
2023-09-08 CVE-2023-40953 Cross-Site Request Forgery (CSRF) vulnerability in Idreamsoft Icms 7.0.16
icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF).
network
low complexity
idreamsoft CWE-352
8.8
2022-02-04 CVE-2021-44977 Path Traversal vulnerability in Idreamsoft Icms
In iCMS <=8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files.
network
low complexity
idreamsoft CWE-22
7.5
2021-11-12 CVE-2020-21141 Cross-Site Request Forgery (CSRF) vulnerability in Idreamsoft Icms 7.0.15
iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.
network
low complexity
idreamsoft CWE-352
8.8
2021-05-28 CVE-2020-26641 Cross-Site Request Forgery (CSRF) vulnerability in Idreamsoft Icms 7.0.16
A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scripts.
network
low complexity
idreamsoft CWE-352
8.8
2019-10-14 CVE-2019-17583 Allocation of Resources Without Limits or Throttling vulnerability in Idreamsoft Icms 7.0.15
idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring followed by a large positive integer.
network
low complexity
idreamsoft CWE-770
7.5
2019-01-30 CVE-2019-7237 Path Traversal vulnerability in Idreamsoft Icms 7.0.13
An issue was discovered in idreamsoft iCMS 7.0.13 on Windows.
network
low complexity
idreamsoft CWE-22
7.5
2019-01-30 CVE-2019-7236 Path Traversal vulnerability in Idreamsoft Icms 7.0.13
An issue was discovered in idreamsoft iCMS 7.0.13.
network
low complexity
idreamsoft CWE-22
7.5
2019-01-30 CVE-2019-7235 Path Traversal vulnerability in Idreamsoft Icms 7.0.13
An issue was discovered in idreamsoft iCMS 7.0.13.
network
low complexity
idreamsoft CWE-22
7.5
2018-09-02 CVE-2018-16366 Cross-Site Request Forgery (CSRF) vulnerability in Idreamsoft Icms 7.0.10
An issue was discovered in idreamsoft iCMS V7.0.10.
network
low complexity
idreamsoft CWE-352
8.8
2018-09-02 CVE-2018-16365 Cross-Site Request Forgery (CSRF) vulnerability in Idreamsoft Icms 7.0.10
An issue was discovered in idreamsoft iCMS V7.0.10.
network
low complexity
idreamsoft CWE-352
8.8