| Titolo | lceCMS lceCMS 2.0.1 There are logical vulnerabilities present |
|---|
| Descrizione | IceCMS is a content management system based on Spring Boot + Vue head-to-back. IceCMS is a pre-Spring Boot + Vue standalone content management system. IceCMS v2.0.1 has a logic defect (concurrency) due to the web application not fully validating the number of user requests. An attacker can send unlimited packets to the /list/909004 interface, which may paralyze the website |
|---|
| Fonte | ⚠️ http://x.x.x.x/Icecms.html |
|---|
| Utente | Qson (UID 59528) |
|---|
| Sottomissione | 04/12/2023 04:34 (3 anni fa) |
|---|
| Moderazione | 13/12/2023 08:40 (9 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 247887 [Thecosy IceCMS 2.0.1 Love /WebResource/resource] |
|---|
| Punti | 15 |
|---|