Skip to content
OpenAdvisories

Vendor

Thecosy

13 known vulnerabilities.

Products

IceCMS 13
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-111686

    IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum

    IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesbynum. Attackers can append crafted SQL after the LIMIT clause concatenated into …

    Thecosy IceCMS
  • High 7.5
    CVE-2026-111685

    IceCMS through 4.1.5 SQL Injection via /WebResource/findresourcebynum

    IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by supplying a crafted num path parameter to /WebResource/findresourcebynum. Attackers can append SQL after the LIMIT clause concatenated v…

    Thecosy IceCMS