CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1CVE-2023-4928 – SQL Injection in instantsoft/icms2
https://notcve.org/view.php?id=CVE-2023-4928
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1. Inyección SQL en el repositorio de GitHub instantsoft/icms2 anterior a 2.16.1. • https://github.com/instantsoft/icms2/commit/3a6b148fa2c943ee7647e0cd14bf68e026b15548 https://huntr.dev/bounties/cb72cc17-5a0d-4392-9a5f-a13aa773de9e • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-4879 – Cross-site Scripting (XSS) - Stored in instantsoft/icms2
https://notcve.org/view.php?id=CVE-2023-4879
Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git. Cross-Site Scripting (XSS) Almacenado en el repositorio de GitHub instantsoft/icms2 anterior a 2.16.1.-git. • https://github.com/instantsoft/icms2/commit/d0aeeaf5979fbdbf80dc3a3227d6c58442ab7487 https://huntr.dev/bounties/7df6b167-3c39-4563-9b8a-33613e25cf27 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2023-4878 – Server-Side Request Forgery (SSRF) in instantsoft/icms2
https://notcve.org/view.php?id=CVE-2023-4878
Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git. Se ha encontrado una vulnerabilidad de Server-Side Request Forgery (SSRF) en el repositorio de GitHub instantsoft/icms2 anterior a 2.16.1-git. • https://github.com/instantsoft/icms2/commit/d0aeeaf5979fbdbf80dc3a3227d6c58442ab7487 https://huntr.dev/bounties/655c4f77-04b2-4220-bfaf-a4d99fe86703 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-4704 – External Control of System or Configuration Setting in instantsoft/icms2
https://notcve.org/view.php?id=CVE-2023-4704
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git. El Control Externo del Sistema o los Ajustes de Configuración en GitHub en el repositorio instantsoft/icms2 anterior a 2.16.1-git • https://github.com/instantsoft/icms2/commit/bc22d89691fdaf38055eba13dda8d959b16fa731 https://huntr.dev/bounties/4a54134d-df1f-43d4-9b14-45f023cd654a • CWE-15: External Control of System or Configuration Setting CWE-610: Externally Controlled Reference to a Resource in Another Sphere •
CVSS: 3.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-4654 – Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2
https://notcve.org/view.php?id=CVE-2023-4654
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1. Cookie sensible en sesión HTTPS sin atributo "Secure" en el repositorio de GitHub instantsoft/icms2 anterior a la versión 2.16.1. • https://github.com/instantsoft/icms2/commit/ca5f150da11d9caae86638885137afe35bcc3592 https://huntr.dev/bounties/56432a75-af43-4b1a-9307-bd8de568351b • CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute •