Arcms

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2018-19558	Arcms Arcms	Cri	0.64	9.8	0.01		Nov 26, 2018	An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php.
CVE-2018-19557	Arcms Arcms	Cri	0.64	9.8	0.01		Nov 26, 2018	An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images.

CVE-2018-19558CriNov 26, 2018
Arcms
Arcms
risk 0.64cvss 9.8epss 0.01
An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php.
CVE-2018-19557CriNov 26, 2018
Arcms
Arcms
risk 0.64cvss 9.8epss 0.01
An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images.