CVE-2023-40833 Information

Description

An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.

Reference

https://gist.github.com/Sholway/93f05987dbf35c15c26de32b1e5590ec