CVE-2023-6757: Thecosy IceCMS API PlanetUser information disclosure

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-12-13 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /adplanet/PlanetUser of the component API. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247885 was assigned to this vulnerability.

Affected products

Thecosy IceCMS: 2.0.1

References

http://124.71.147.32:8082/IceCMS3.html
https://vuldb.com/?ctiid.247885
https://vuldb.com/?id.247885
http://124.71.147.32:8082/IceCMS3.html
https://vuldb.com/?ctiid.247885
https://vuldb.com/?id.247885

Get alerted when CVE-2023-6757 or the next vulnerability affects your stack