Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2024-22938
Disclosure Date: January 30, 2024 (last updated February 03, 2024)
Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component.
0
Attacker Value
Unknown
CVE-2022-44937
Disclosure Date: November 28, 2022 (last updated February 24, 2025)
Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module.
0
Attacker Value
Unknown
CVE-2022-28606
Disclosure Date: May 05, 2022 (last updated February 23, 2025)
An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server.
0
