Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2018-16387 6.8 An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add. 2018-10-25 01:37:00
CVE-2018-16444 6.4 An issue was discovered in SeaCMS 6.61. adm1n/admin_reslib.php has SSRF via the url parameter. 2018-10-25 01:36:00
CVE-2018-16446 6.4 An issue was discovered in SeaCMS through 6.61. adm1n/admin_database.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting install_l 2018-10-25 01:35:00
CVE-2018-16445 7.5 An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admin_topic_vod.php request. 2018-10-25 01:27:00
CVE-2018-16432 7.5 BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login. 2018-10-25 01:24:00
CVE-2018-16448 6.8 Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super administrator and web editor via upload/admin.php/sys/sa 2018-10-25 01:06:00
CVE-2018-16450 4.3 CraftedWeb through 2013-09-24 has reflected XSS via the p parameter. 2018-10-25 00:53:00
CVE-2018-16458 4.3 An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication of any article. 2018-10-25 00:51:00
CVE-2018-0672 4.3 Cross-site scripting vulnerability in Movable Type versions prior to Ver. 6.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. 2018-10-25 00:30:00
CVE-2018-16332 6.8 An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability. 2018-10-24 15:19:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: