iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.
- https://github.com/jayus0821/insight/blob/master/iCMS%20SSRF.md
No PoCs found on GitHub currently.