Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2021-36547
Disclosure Date: October 28, 2021 (last updated February 23, 2025)
A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file.
0
Attacker Value
Unknown
CVE-2020-25422
Disclosure Date: October 28, 2021 (last updated February 23, 2025)
A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
0
Attacker Value
Unknown
CVE-2020-24223
Disclosure Date: August 30, 2020 (last updated February 22, 2025)
Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.
0
