48 matches found
Sql injection
ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php...
Design/Logic Flaw
ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edituser&id=1...
CVE-2022-28525
CVE-2022-28525 affects ED01-CMS v20180505. The vulnerability is an arbitrary file upload via /admin/users.php?source=edit_user&id=1, indicating insecure handling of file uploads in the user edit functionality. According to the records, the CVSS metrics (2.0/3.1) show a network-based, low-effort p...
CVE-2022-28525
ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edituser&id=1...
CVE-2022-28524
ED01-CMS v20180505 contains a SQL injection in the component post.php due to lack of validation of externally entered SQL statements. This allows an attacker to execute arbitrary SQL commands on the database, potentially compromising data confidentiality, integrity, and availability. CVSS data fr...
CVE-2022-28524
ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php...
ED01-CMS cross-site scripting vulnerability
ED01-CMS is a content management system. A cross-site scripting vulnerability exists in the sposts.php component of ED01-CMS 1.0, which can be exploited by attackers to execute arbitrary web scripts or HTML by inserting specially crafted loads into the Post title or Post content fields...
ED01-CMS arbitrary file upload vulnerability
ED01-CMS is a content management system. ED01-CMS 1.0 is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary commands...
ED01-CMS SQL Injection Vulnerability
ED01-CMS is a content management system. ED01-CMS 1.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection in the cposts.php component via the cid parameter...
CVE-2020-18259
ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting XSS vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Post title or Post content fields...
CVE-2020-18262
ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter...
CVE-2020-18259
ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting XSS vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Post title or Post content fields...
CVE-2020-18261
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands...
CVE-2020-18261
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands...
CVE-2020-18262
ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter...
Cross site scripting
ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting XSS vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Post title or Post content fields...
Design/Logic Flaw
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands...
Sql injection
ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter...
CVE-2020-18261
CVE-2020-18261 affects ED01-CMS v1.0. An arbitrary file upload vulnerability in the image upload function allows attackers to execute arbitrary commands. The connected documents confirm the affected product and the underlying issue (unvalidated file upload) but do not provide remediation details ...
CVE-2020-18262
CVE-2020-18262 affects ED01-CMS v1.0. The vulnerability is a SQL injection in the cposts.php component via the cid parameter, reported across multiple sources. According to the provided data, this leads to high/severe impact (CVSSv2 base 7.5, CVSSv3.1 base 9.8) with network access and no authenti...