Approved changes feed: RSS · Atom

cpe:2.3:a:idreamsoft:icms:7.0.13:*:*:*:*:*:*:*

part: a version: 7.0.13 update: *

VendorIdreamsoft (8dc9c6b3-ee1e-5503-bd32-7dec8bf59e6e)
ProductIcms (07f2e674-c405-509d-84c4-44096bcb9a3e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-18070 vulnerable 2026-06-08 05:20:56.834427 Details available
Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()" method of the component "database.admincp.php".
Published: 2021-04-29T23:28:58.000Z
Updated: 2024-08-04T14:00:49.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7237 vulnerable 2026-06-08 05:14:14.135425 Details available
An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal.
Published: 2019-01-30T21:00:00.000Z
Updated: 2024-08-04T20:46:45.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7236 vulnerable 2026-06-08 05:14:14.135126 Details available
An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal.
Published: 2019-01-30T21:00:00.000Z
Updated: 2024-08-04T20:46:45.601Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7235 vulnerable 2026-06-08 05:14:14.134673 Details available
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.
Published: 2019-01-30T21:00:00.000Z
Updated: 2024-08-04T20:46:45.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7234 vulnerable 2026-06-08 05:14:14.134255 Details available
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded via an admincp.php?app=apps&do=pack request.
Published: 2019-01-30T21:00:00.000Z
Updated: 2024-08-04T20:46:45.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7160 vulnerable 2026-06-08 05:14:13.924490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.