CVE-2023-6759

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247887.
References
Link Resource
http://39.106.130.187/Icecms.html Exploit Third Party Advisory
https://vuldb.com/?ctiid.247887 Permissions Required Third Party Advisory
https://vuldb.com/?id.247887 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:thecosy:icecms:2.0.1:*:*:*:*:*:*:*

History

15 Dec 2023, 18:02

Type Values Removed Values Added
CPE cpe:2.3:a:thecosy:icecms:2.0.1:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE NVD-CWE-noinfo
References () http://39.106.130.187/Icecms.html - () http://39.106.130.187/Icecms.html - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.247887 - () https://vuldb.com/?ctiid.247887 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.247887 - () https://vuldb.com/?id.247887 - Third Party Advisory

13 Dec 2023, 16:33

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-13 15:15

Updated : 2024-05-17 02:33


NVD link : CVE-2023-6759

Mitre link : CVE-2023-6759

CVE.ORG link : CVE-2023-6759


JSON object : View

Products Affected

thecosy

  • icecms
CWE
NVD-CWE-noinfo CWE-837

Improper Enforcement of a Single, Unique Action