Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
victor cms project victor cms vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2018-15603
An issue exists in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen.
Victor Cms Project Victor Cms
4.3
CVSSv2
CVE-2020-15599
Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field.
Victor Cms Project Victor Cms
3.5
CVSSv2
CVE-2018-16775
An issue exists in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu.
Victor Cms Project Victor Cms
6.5
CVSSv2
CVE-2022-23873
Victor CMS v1.0 exists to contain a SQL injection vulnerability that allows malicious users to inject arbitrary commands via 'user_firstname' parameter.
Victor Cms Project Victor Cms 1.0
5
CVSSv2
CVE-2022-28060
SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php.
Victor Cms Project Victor Cms 1.0
6.5
CVSSv2
CVE-2020-35597
Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_update_categories.php.
Victor Cms Project Victor Cms 1.0
7.5
CVSSv2
CVE-2022-26201
Victor CMS v1.0 exists to contain a SQL injection vulnerability.
Victor Cms Project Victor Cms 1.0
5
CVSSv2
CVE-2020-23945
A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database.
Victor Cms Project Victor Cms 1.0
NA
CVE-2020-23966
SQL Injection vulnerability in victor cms 1.0 allows malicious users to execute arbitrary commands via the post parameter to /post.php in a crafted GET request.
Victor Cms Project Victor Cms 1.0
7.5
CVSSv2
CVE-2020-29280
The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page.
Victor Cms Project Victor Cms 1.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925
CVE-2023-41826
LFI
CVE-2022-22364
CVE-2024-2887
command injection
remote code execution
CVE-2024-34446
CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »