Submeter #246178: lceCMS lceCMS v 2.0.1 There are logical vulnerabilities presentinformação

TítulolceCMS lceCMS v 2.0.1 There are logical vulnerabilities present
DescriçãoIceCMS is a pre-Spring Boot + Vue standalone content management system. IceCMS v2.0.1 has a logic defect (concurrency) due to the web application not fully validating the number of user requests. An attacker can send unlimited packets to the /Websquare/likeClickComment/282 interface, which may paralyze the website.
Fonte⚠️ http://x.x.x.x/wenjian/2.html
Utilizador
 zero121 (UID 59411)
Submissão01/12/2023 16h45 (há 3 anos)
Moderação01/12/2023 17h43 (58 minutes later)
EstadoAceite
Entrada VulDB246617 [Thecosy IceCMS 2.0.1 Comment Like likeClickComment]
Pontos18

Interested in the pricing of exploits?

See the underground prices here!