IceCMS
IceCMS copied to clipboard
Thecosy
🌈冰激凌内容管理系统🍦,实现MacWK资源站，社区图片视频圈子CMS，支持网页端移动端小程序🌟适合做 资讯商城，社区论坛，聊天交友 社区，博客，圈子，论坛，图片，视频，社交。
There is a Stored-XSS vulnerability in IceCMS v1.0.0 api : /Websquare/create/circle planet - circle POC： The payload is ``  
This api does not require login, obtains user information through user_id, and returns the user name, password, and email address in plain text.  It is like the preview address...
Recently, our team discovered a security vulnerability that has led to an unauthorized access issue in the latest version of the project, which could pose a serious risk of information...
Recently, our team discovered a security vulnerability that has led to an unauthorized access issue in the latest version of the project, which could pose a serious risk of information...
Recently, our team discovered a security vulnerability that has led to an unauthorized access issue in the latest version of the project, which could pose a serious risk of information...
Recently, our team discovered a security vulnerability that has led to an unauthorized access issue in the latest version of the project, which could pose a serious risk of information...
Recently, our team discovered a security vulnerability that has led to an unauthorized access issue in the latest version of the project, which could pose a serious risk of information...
You can see in the figure below that the following API interface lacks authentication.(hithub is me) Iterate through the numbers in the figure below. By iterating through these numbers, you...
