A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /Websquare/likeClickComment/ of the component Comment Like Handler. The manipulation leads to improper enforcement of a single, unique action. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-246617 was assigned to this vulnerability.
oryginał ENCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:NThecosy Icecms
APPThecosy2.0.1
Powiązane podatności
Nieograniczony upload plików w Thecosy IceCMS — RCE przez FileUtils.java
IceCMS: zakodowany na stałe klucz JWT umożliwia fałszowanie tokenów
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters i...
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated a...
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthent...