A vulnerability was found in iCMS 7.0.16. It has been rated as critical. This impacts an unknown function of the file admincp.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request forgery.
This vulnerability is documented as CVE-2022-41496. The attack requires being on the local network. There is not any exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-41496 | iCMS 7.0.16 Parameter admincp.php url server-side request forgery (EUVD-2022-44689)
A vulnerability was found in iCMS 7.0.16. It has been rated as critical. This impacts an unknown function of the file admincp.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR