An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.

Published Oct 12, 2023 · Updated Aug 2, 2024 · Assigned by mitre