Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cms vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2022-41544
GetSimple CMS v3.3.16 exists to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.
Get-simple Getsimple Cms 3.3.16
1 Github repository
9.8
CVSSv3
CVE-2022-39297
MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many administration tools. Attackers can deserialize arbitrary data on affected versions of `melisplatform/melis-cms`, and ultimately leads to the execution of ...
Melistechnology Meliscms
9.8
CVSSv3
CVE-2022-37204
Final CMS 5.1.0 is vulnerable to SQL Injection.
Jflyfox Jfinal Cms 5.1.0
1 Github repository
9.8
CVSSv3
CVE-2022-37203
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
Jflyfox Jfinal Cms 5.1.0
1 Github repository
9.8
CVSSv3
CVE-2022-40766
Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - , <?php' substring.
Moderncampus Omni Cms 10.2.4
9.8
CVSSv3
CVE-2022-38296
Cuppa CMS v1.0 exists to contain an arbitrary file upload vulnerability via the File Manager.
Cuppacms Cuppacms 1.0
9.8
CVSSv3
CVE-2022-37223
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
Jflyfox Jfinal Cms 5.1.0
9.8
CVSSv3
CVE-2022-37199
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
Jflyfox Jfinal Cms 5.1.0
9.8
CVSSv3
CVE-2022-2765
A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/settings. The manipulation leads to improper authentication. The attack can be launched remotel...
Company Website Cms Project Company Website Cms 1.0
9.8
CVSSv3
CVE-2022-2740
A vulnerability was found in SourceCodester Company Website CMS. It has been declared as critical. This vulnerability affects unknown code of the file /dashboard/add-blog.php of the component Add Blog. The manipulation of the argument ufile leads to unrestricted upload. The attac...
Company Website Cms Project Company Website Cms -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
6
7
8
9
10
NEXT »