TThecosy

Products

Exploited and recent CVEs

• CVE-2026-111686 High 7.5 IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum 0.4%
• CVE-2026-111685 High 7.5 IceCMS through 4.1.5 SQL Injection via /WebResource/findresourcebynum 0.5%
• CVE-2026-111673 Critical 9.8 IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints 0.5%
• CVE-2023-6762 Medium 5.4 Thecosy IceCMS Article permission 0.7%
• CVE-2023-6761 Medium 4.3 Thecosy IceCMS User Data access control 0.8%
• CVE-2023-6760 Medium 6.3 Thecosy IceCMS user session 0.6%
• CVE-2023-6759 Medium 5.3 Thecosy IceCMS Love resource improper enforcement of a single, unique action 1.0%
• CVE-2023-6758 Medium 5.3 Thecosy IceCMS API PlanetCommentList access control 0.7%
• CVE-2023-6757 Medium 5.3 Thecosy IceCMS API PlanetUser information disclosure 1.0%
• CVE-2023-6756 Medium 5.3 Thecosy IceCMS Captcha login excessive authentication 1.3%
• CVE-2023-6467 Low 3.1 Thecosy IceCMS Comment Like improper enforcement of a single, unique action 0.6%
• CVE-2023-6466 Low 3.5 Thecosy IceCMS User Comment planet cross site scripting 0.6%
• CVE-2023-6438 Medium 4.3 Thecosy IceCMS Like improper enforcement of a single, unique action 0.7%