Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/27 2:35 p.m.9 views

CVE-2025-5149

A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /index.php?articleadmin/getallcon of the component Login. The manipulation of the argument uid leads to improper authentication. The attack c...

8.1CVSS7AI score0.00517EPSS
Exploits1References1
Circl
Circl
added 2025/05/25 1:46 p.m.25 views

CVE-2025-5149

creationtimestamp| type| source ---|---|--- 2025-05-25 13:46:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17507 2025-05-25 13:47:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpysc56jl7c2 2025-05-25...

8.1CVSS5.6AI score0.00517EPSS
Exploits1References3
OSV
OSV
added 2025/05/25 1:15 p.m.4 views

CVE-2025-5149

A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /index.php?articleadmin/getallcon of the component Login. The manipulation of the argument uid leads to improper authentication. The attack c...

8.1CVSS4.8AI score0.00517EPSS
Exploits1References4
NVD
NVD
added 2025/05/25 1:15 p.m.12 views

CVE-2025-5149

A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /index.php?articleadmin/getallcon of the component Login. The manipulation of the argument uid leads to improper authentication. The attack c...

8.1CVSS0.00517EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/05/25 1:0 p.m.16 views

CVE-2025-5149 WCMS Login getallcon getMemberByUid improper authentication

A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /index.php?articleadmin/getallcon of the component Login. The manipulation of the argument uid leads to improper authentication. The attack c...

6.3CVSS0.00517EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/05/25 1:0 p.m.13 views

CVE-2025-5149 WCMS Login getallcon getMemberByUid improper authentication

A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /index.php?articleadmin/getallcon of the component Login. The manipulation of the argument uid leads to improper authentication. The attack c...

6.3CVSS5.6AI score0.00517EPSS
Exploits1References4
Rows per page
Query Builder