Icms Content Management Systems Icms — known CVE vulnerabilities

Every CVE whose affected-product data names Icms Content Management Systems Icms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2005-4397 — CVSS 7.5 (high): SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Event_ID parameter.
• CVE-2005-3574 — CVSS 5.0 (medium): PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter.
• CVE-2005-4396 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via…