📦 Ideacms

This SQL injection vulnerability in IdeaCMS allows remote attackers to execute arbitrary SQL commands through the whereRaw function in Coupon.php. It affects all IdeaCMS installations up to version 1....

This critical SQL injection vulnerability in IdeaCMS allows remote attackers to manipulate database queries through the Article/Goods function. Attackers can potentially read, modify, or delete databa...

CVE-2025-4291 is a critical unrestricted file upload vulnerability in IdeaCMS's saveUpload function that allows remote attackers to upload malicious files. This can lead to arbitrary code execution, d...