CVE-2019-17552

An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-10-14

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Icms (Idreamsoft)

References

• https://github.com/idreamsoft/iCMS/issues/77