IdeaCMS vulnerabilities
We track 4 vulnerabilities in IdeaCMS products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 8, 2025.
Latest IdeaCMS vulnerabilities
- 9.8 Critical severity
IdeaCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/index/Coupon.php. Such manipulation of the argument params leads to sql injection. The attack may be launched remotely. The exploit has been di
- 7.2 High severity
IdeaCMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The atta
- 8.8 High severity
IdeaCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IdeaCMS up to 1.7 and classified as critical. This issue affects the function Article/Goods of the file /api/v1.index.article/getList.html. The manipulation of the argument Field leads to sql injection. The attack may be initiated
- 9.8 Critical severity
IdeaCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in IdeaCMS up to 1.6. Affected is the function saveUpload. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public an