Lucene search

VulDBCVE-2023-5259

HistorySep 29, 2023 - 12:15 p.m.

CVE-2023-5259

2023-09-2912:15:13

CWE-404

VulDB

web.nvd.nist.gov

foru cms

vulnerability

denial of service

/admin/cms_admin.php

cve-2023-5259

nvd

vdb-240868

CVSS2

3.3

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:N/I:N/A:P

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

23.6%

JSON

A vulnerability classified as problematic was found in ForU CMS. This vulnerability affects unknown code of the file /admin/cms_admin.php. The manipulation of the argument del leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-240868.

Affected configurations

Nvd

Node

foru_cms_projectforu_cmsMatch-

VendorProductVersionCPE
foru_cms_projectforu_cms-cpe:2.3:a:foru_cms_project:foru_cms:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
foru_cms_project	foru_cms	-	cpe:2.3:a:foru_cms_project:foru_cms:-:::::::*

CNA Affected

[
  {
    "vendor": "ForU",
    "product": "CMS",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

github.com/RCEraser/cve/blob/main/ForU-CMS.md

vuldb.com/?ctiid.240868

vuldb.com/?id.240868

CVSS2

3.3

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:N/I:N/A:P

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

23.6%

JSON

Related for CVE-2023-5259