Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
victor cms project victor cms vulnerabilities and exploits
(subscribe to this query)
4.8
CVSSv3
CVE-2018-16775
An issue exists in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu.
Victor Cms Project Victor Cms
6.1
CVSSv3
CVE-2018-15603
An issue exists in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen.
Victor Cms Project Victor Cms
6.1
CVSSv3
CVE-2020-15599
Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field.
Victor Cms Project Victor Cms
9.8
CVSSv3
CVE-2022-26201
Victor CMS v1.0 exists to contain a SQL injection vulnerability.
Victor Cms Project Victor Cms 1.0
8.8
CVSSv3
CVE-2022-27478
Victor v1.0 exists to contain a remote code execution (RCE) vulnerability via the component admin/profile.php?section=admin.
Victor Cms Project Victor Cms 1.0
7.5
CVSSv3
CVE-2022-28060
SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php.
Victor Cms Project Victor Cms 1.0
8.8
CVSSv3
CVE-2022-23873
Victor CMS v1.0 exists to contain a SQL injection vulnerability that allows malicious users to inject arbitrary commands via 'user_firstname' parameter.
Victor Cms Project Victor Cms 1.0
7.5
CVSSv3
CVE-2021-46458
Victor CMS v1.0 exists to contain a SQL injection vulnerability in the component admin/posts.php?source=add_post. This vulnerability can be exploited through a crafted POST request via the post_title parameter.
Victor Cms Project Victor Cms 1.0
9.8
CVSSv3
CVE-2021-25203
Arbitrary file upload vulnerability in Victor CMS v 1.0 allows malicious users to execute arbitrary code via the file upload to \CMSsite-master\admin\includes\admin_add_post.php.
Victor Cms Project Victor Cms 1.0
7.5
CVSSv3
CVE-2021-46459
Victor CMS v1.0 exists to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilities can be exploited through a crafted POST request via the user_name, user_firstname,user_lastname, or user_email parameters.
Victor Cms Project Victor Cms 1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserialization
CVE-2024-4541
CVE-2024-3080
CVE-2024-4787
log injection
CVE-2024-5967
inject
CVE-2024-30078
CVE-2024-5899
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »