Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2020-29597
Disclosure Date: December 07, 2020 (last updated February 22, 2025)
IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows unauthenticated attackers to upload files into the server.
0
Attacker Value
Unknown
CVE-2018-17366
Disclosure Date: September 23, 2018 (last updated November 27, 2024)
An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.
0
Attacker Value
Unknown
CVE-2018-16346
Disclosure Date: September 02, 2018 (last updated November 27, 2024)
ChemCMS 1.0.6 has XSS via the "setting -> website information" field.
0
Attacker Value
Unknown
CVE-2018-14579
Disclosure Date: July 24, 2018 (last updated November 27, 2024)
GolemCMS through 2008-12-24, if the install/ directory remains active after an installation, allows remote attackers to execute arbitrary PHP code by inserting this code into the "Database Information" "Table prefix" form field, or obtain sensitive information via a direct request for install/install.sql.
0
Attacker Value
Unknown
CVE-2018-10295
Disclosure Date: April 22, 2018 (last updated November 26, 2024)
ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.
0
