Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
content management system vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-3770
A vulnerability classified as critical was found in Yunjing CMS. This vulnerability affects unknown code of the file /index/user/upload_img.html. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclos...
Xjyunjing Yunjing Content Management System -
445
VMScore
CVE-2007-1966
Session fixation vulnerability in eXV2 CMS 2.0.4.3 and previous versions allows remote malicious users to hijack web sessions by setting the PHPSESSID cookie.
Exv2 Content Management System 2.0.4.3
383
VMScore
CVE-2016-6201
Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) prior to 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote malicious users to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx.
Ektron Ektron Content Management System
578
VMScore
CVE-2015-3424
SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote malicious users to execute arbitrary SQL commands via the SIDX parameter.
Accentis Content Resource Management System
383
VMScore
CVE-2015-3425
Cross-site scripting (XSS) vulnerability in Accentis Content Resource Management System before October 2015 patch allows remote malicious users to inject arbitrary web script or HTML via the ctl00$cph_content$_uig_formState parameter.
Accentis Content Resource Management System
685
VMScore
CVE-2007-1907
PHP remote file inclusion vulnerability in warn.php in Pathos Content Management System (CMS) 0.92-2 allows remote malicious users to execute arbitrary PHP code via a URL in the file parameter.
Pathos Content Management System 0.92.2
1 EDB exploit
668
VMScore
CVE-2006-6110
Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote malicious users to execute arbitrary SQL commands via the (1) vjob parameter in publications_list.asp or (2) InfoID parameter in publication_view.asp.
Bpg-infotech Content Management System
312
VMScore
CVE-2015-4427
Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) prior to 9.10 SP1 (Build 9.1.0.184.1.114) allow remote authenticated users to inject arbitrary web script or HTML via the (1) page, (2) action, (3) folder_...
Ektron Ektron Content Management System
383
VMScore
CVE-2016-6133
Cross-site scripting (XSS) vulnerability in Ektron Content Management System prior to 9.1.0.184SP3(9.1.0.184.3.127) allows remote malicious users to inject arbitrary web script or HTML via the rptStatus parameter in a Report action to WorkArea/SelectUserGroup.aspx.
Ektron Ektron Content Management System
585
VMScore
CVE-2015-3624
Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (CMS) prior to 9.10 SP1 (Build 9.1.0.184.1.120) allows remote malicious users to hijack the authentication of content administrators for reque...
Ektron Ektron Content Management System
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »