CVE-2023-6759

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247887.

• CWE-837

• http://39.106.130.187/Icecms.htmlExploit, Third Party Advisory
• https://vuldb.com/?ctiid.247887Permissions Required, Third Party Advisory
• https://vuldb.com/?id.247887Third Party Advisory
• http://39.106.130.187/Icecms.htmlExploit, Third Party Advisory
• https://vuldb.com/?ctiid.247887Permissions Required, Third Party Advisory
• https://vuldb.com/?id.247887Third Party Advisory

Published

Dec 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6752Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2023-6753Path Traversal in GitHub repository mlflow/mlflow prior to 2…8.8
• CVE-2023-6755A vulnerability was found in DedeBIZ 6.2 and classified as c…7.2
• CVE-2023-6756A vulnerability was found in Thecosy IceCMS 2.0.1. It has be…9.8
• CVE-2023-6757A vulnerability was found in Thecosy IceCMS 2.0.1. It has be…6.5
• CVE-2023-6758A vulnerability was found in Thecosy IceCMS 2.0.1. It has be…4.3
• CVE-2023-6760A vulnerability classified as critical was found in Thecosy …5.4
• CVE-2023-6761A vulnerability, which was classified as problematic, has be…8.8
• CVE-2023-6762A vulnerability, which was classified as critical, was found…4.3
• CVE-2023-6763Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-6764 A format string vulnerability in a function of t…8.1
• CVE-2023-6765A vulnerability was found in SourceCodester Online Tours & T…9.8