Threat database

IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesbynum. Attackers can append crafted SQL after the LIMIT clause concatenated into a MyBatis-Plus QueryWrapper to extract database contents via union-based or blind techniques.

IceCMS versions up to 4.1.5 contain an unauthenticated SQL injection vulnerability in the /WebResource/findresourcebynum endpoint. This flaw allows remote attackers to inject arbitrary SQL commands via the num path parameter, potentially extracting database contents through union-based or blind SQL injection techniques. The vulnerability does not require authentication and has a high severity rating.

IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/** is excluded from the Shiro jwt filter. Attackers can send PUT requests to /User/updateUser to set a new password and role on any userId, including administrators, enabling full account takeover.