Instantcms

Instantcms

20 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2025-59055

Exploit
  • EPSS 0.19%
  • Veröffentlicht 11.09.2025 18:46:29
  • Zuletzt bearbeitet 24.09.2025 13:30:22

InstantCMS is a free and open source content management system. A blind Server-Side Request Forgery (SSRF) vulnerability in InstantCMS up to and including 2.17.3 allows authenticated remote attackers to make nay HTTP/HTTPS request via the package par...

9.8

CVE-2013-10051

Exploit
  • EPSS 75.81%
  • Veröffentlicht 01.08.2025 20:41:38
  • Zuletzt bearbeitet 09.10.2025 16:50:05

A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval() within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression a...

5.4

CVE-2024-50348

Exploit
  • EPSS 0.44%
  • Veröffentlicht 29.10.2024 23:15:03
  • Zuletzt bearbeitet 06.11.2024 14:49:46

InstantCMS is a free and open source content management system. In photo upload function in the photo album page there is no input validation taking place. Due to this attackers are able to inject the XSS (Cross Site Scripting) payload and execute. T...

5.4

CVE-2024-31213

Exploit
  • EPSS 0.17%
  • Veröffentlicht 05.04.2024 15:15:07
  • Zuletzt bearbeitet 17.01.2025 15:00:07

InstantCMS is a free and open source content management system. An open redirect was found in the ICMS2 application version 2.16.2 when being redirected after modifying one's own user profile. An attacker could trick a victim into visiting their web ...

7.2

CVE-2024-31212

Exploit
  • EPSS 0.32%
  • Veröffentlicht 04.04.2024 23:15:16
  • Zuletzt bearbeitet 17.01.2025 14:58:34

InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacker with administrative privileges can cause the application to execute unauthorized SQL code. The vulnerability...

4.8

CVE-2023-4879

Exploit
  • EPSS 0.04%
  • Veröffentlicht 10.09.2023 18:15:08
  • Zuletzt bearbeitet 21.11.2024 08:36:10

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git.

5.4

CVE-2023-4878

Exploit
  • EPSS 0.06%
  • Veröffentlicht 10.09.2023 18:15:07
  • Zuletzt bearbeitet 21.11.2024 08:36:10

Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

4.9

CVE-2023-4704

Exploit
  • EPSS 0.08%
  • Veröffentlicht 01.09.2023 10:15:08
  • Zuletzt bearbeitet 21.11.2024 08:35:43

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

3.5

CVE-2023-4654

Exploit
  • EPSS 0.04%
  • Veröffentlicht 31.08.2023 01:15:10
  • Zuletzt bearbeitet 21.11.2024 08:35:37

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1.

6.1

CVE-2023-4655

Exploit
  • EPSS 0.07%
  • Veröffentlicht 31.08.2023 01:15:10
  • Zuletzt bearbeitet 21.11.2024 08:35:37

Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1.