iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.

Published Aug 10, 2023 · Updated Jul 9, 2026 · Assigned by mitre