Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2020-28672
Disclosure Date: January 07, 2021 (last updated November 28, 2024)
MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE.
0
Attacker Value
Unknown
CVE-2020-25985
Disclosure Date: October 07, 2020 (last updated February 22, 2025)
MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion. Any authenticated user can delete files on and off the webserver (php files can be unlinked and not deleted).
0
Attacker Value
Unknown
CVE-2020-25987
Disclosure Date: October 06, 2020 (last updated February 22, 2025)
MonoCMS Blog 1.0 stores hard-coded admin hashes in the log.xml file in the source files for MonoCMS Blog. Hash type is bcrypt and hashcat mode 3200 can be used to crack the hash.
0
Attacker Value
Unknown
CVE-2020-25986
Disclosure Date: October 06, 2020 (last updated February 22, 2025)
A Cross Site Request Forgery (CSRF) vulnerability in MonoCMS Blog 1.0 allows attackers to change the password of a user.
0
