CVE-2022-25412

2022-02-2823:15:12

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.0%

JSON

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.

CPENameOperatorVersion
cmseq0.94
cmseq0.91
cmseq97
cmseq0.89
cmseq0.88
cmseq104
cmseq0.90
cmseq0.92
cmseq0.87
cmseq0.87.1

Name	Operator	Version
cms	eq	0.94
cms	eq	0.91
cms	eq	97
cms	eq	0.89
cms	eq	0.88
cms	eq	104
cms	eq	0.90
cms	eq	0.92
cms	eq	0.87
cms	eq	0.87.1

Rows per page:

1-10 of 211

References

github.com/maxsite/cms/issues/486