iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.

Published Oct 13, 2022 · Updated May 15, 2025 · Assigned by mitre