Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2022-36226
Disclosure Date: August 26, 2022 (last updated February 24, 2025)
SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.
0
Attacker Value
Unknown
CVE-2019-11401
Disclosure Date: April 22, 2019 (last updated November 27, 2024)
A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.
0
