NVD disclosure day

Published threat advisories for August 10, 2023

CVE advisoryCRITICAL

CVE-2023-39806

iCMS bakupdata SQL Injection Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A SQL injection vulnerability exists in the iCMS bakupdata function, allowing unauthenticated attackers to execute arbitrary SQL commands remotely. This could compromise data integrity, availability, and expose sensitive information. Confirm if iCMS instances are affected and assess their internet reachability and busi

NVD published:

CVE advisoryCRITICAL

CVE-2023-39805

iCMS SQL Injection Vulnerability in Admin Panel

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A SQL injection vulnerability in iCMS could allow attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access and manipulation. This issue impacts the integrity and availability of the content management system's data. It is important to determine if your organization uses iCMS and asse

NVD published: