CVE-2019-6259: Icmsdev Icms

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data_id parameter.

Affected products

• Icmsdev Icms: version 7.0.13 only

Published 2019-01-14. Last modified 2026-06-17.