CVE-2025-22984

all versions

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to

7.5HIGH

CVE-2025-22983

all versions

An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access s

7.5HIGH

CVE-2024-48202

<= 3.4.7

icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile.

9.8CRITICAL

CVE-2024-46612

< 3.4.7

IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication informati

9.8CRITICAL

CVE-2024-46610

<= 3.4.7

An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' information, including username

7.5HIGH

CVE-2024-46609

<= 3.4.7

An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attacke

7.5HIGH

CVE-2024-46607

<= 3.4.7

Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the user

7.6HIGH

CVE-2023-6762

all versions

A vulnerability, which was classified as critical, was found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file

5.4MEDIUM

CVE-2023-6761

all versions

A vulnerability, which was classified as problematic, has been found in Thecosy IceCMS up to 2.0.1. This issue affects some unknow

4.3MEDIUM

CVE-2023-6760

all versions

A vulnerability classified as critical was found in Thecosy IceCMS up to 2.0.1. This vulnerability affects unknown code. The manip

6.3MEDIUM

CVE-2023-6759

all versions

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebRes

5.3MEDIUM

CVE-2023-6758

all versions

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as critical. Affected by this issue is some unknown functiona

5.3MEDIUM

CVE-2023-6757

all versions

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unkno

5.3MEDIUM

CVE-2023-6756

all versions

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been classified as problematic. Affected is an unknown function of the f

5.3MEDIUM

CVE-2023-6467

all versions

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as problematic. This issue affects some unknown processing of

3.1LOW

CVE-2023-6466

all versions

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unknown code of

3.5LOW

CVE-2023-6438

all versions

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /Web

4.3MEDIUM

CVE-2023-42188

all versions

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF).

6.5MEDIUM

CVE-2023-40833

all versions

An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.

9.8CRITICAL

CVE-2023-36100

all versions

An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID

9.8CRITICAL

CVE-2023-33356

all versions

IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).

5.4MEDIUM

CVE-2023-33355

all versions

IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive informat

7.5HIGH