CVE-2023-6759

Published: Dec 13, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247887.

Affected (1)

Products: Thecosy: Icecms

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Thecosy Icecms	Version 2.0.1

Related CWEs

Improper Enforcement of a Single, Unique Action

The product requires that an actor should only be able to perform an action once, or to have only one unique action, but the product does not enforce or improperly enforces this restriction.

References (6)

http://39.106.130.187/Icecms.html

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?ctiid.247887

Source: cna@vuldb.com

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.247887

Source: cna@vuldb.com

Third Party Advisory

http://39.106.130.187/Icecms.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://vuldb.com/?ctiid.247887

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.247887

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.