A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-246438 is the identifier assigned to this vulnerability.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NThecosy Icecms
APPThecosy2.0.1
Powiązane podatności
Nieograniczony upload plików w Thecosy IceCMS — RCE przez FileUtils.java
IceCMS: zakodowany na stałe klucz JWT umożliwia fałszowanie tokenów
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters i...
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated a...
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthent...