Source Trace
Products
4- 6 CVEs
- 3 CVEs
- 1 CVE
- 1 CVE
Recent CVEs
11| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-22334 | Med | 0.42 | 6.5 | 0.00 | May 8, 2023 | Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/admin_admin.php. | ||
| CVE-2020-36006 | Med | 0.42 | 6.5 | 0.01 | Jun 3, 2021 | AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site. | ||
| CVE-2020-36005 | Med | 0.42 | 6.5 | 0.01 | Jun 3, 2021 | AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site. | ||
| CVE-2020-36004 | Med | 0.42 | 6.5 | 0.01 | Jun 3, 2021 | AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information. | ||
| CVE-2021-45380 | Med | 0.40 | 6.1 | 0.03 | Jan 23, 2022 | AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php | ||
| CVE-2020-36007 | Med | 0.40 | 6.1 | 0.01 | Jun 3, 2021 | AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users. | ||
| CVE-2019-9595 | Med | 0.40 | 6.1 | 0.01 | Mar 6, 2019 | AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter. | ||
| CVE-2024-45894 | Med | 0.32 | 4.9 | 0.00 | Oct 7, 2024 | BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request. | ||
| CVE-2018-18726 | Med | 0.31 | 4.8 | 0.01 | Oct 29, 2018 | An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5. | ||
| CVE-2018-18723 | Med | 0.31 | 4.8 | 0.01 | Oct 29, 2018 | An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5. | ||
| CVE-2018-18722 | Med | 0.31 | 4.8 | 0.01 | Oct 29, 2018 | An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5. |
- risk 0.42cvss 6.5epss 0.00
Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/admin_admin.php.
- risk 0.42cvss 6.5epss 0.01
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.
- risk 0.42cvss 6.5epss 0.01
AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.
- risk 0.42cvss 6.5epss 0.01
AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information.
- risk 0.40cvss 6.1epss 0.03
AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php
- risk 0.40cvss 6.1epss 0.01
AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users.
- risk 0.40cvss 6.1epss 0.01
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.
- risk 0.32cvss 4.9epss 0.00
BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request.
- risk 0.31cvss 4.8epss 0.01
An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5.
- risk 0.31cvss 4.8epss 0.01
An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.
- risk 0.31cvss 4.8epss 0.01
An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.