CVE-2021-3267

File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function...

CVE-2021-3267

File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function...

CVE-2021-31707

Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type...

PT-2023-11554 · Kitecms · Kitecms

Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the comment parameter. Recommendations: For KiteCMS version 1.1, avoid using the comment parameter until a fix is available. ...

CVE-2020-20521

CVE-2020-20521 is a Cross Site Scripting vulnerability in KiteCMS v1.1 that enables a remote attacker to execute arbitrary code via the comment parameter. The CVSS v3.1 base score is 6.1 (Medium); attack vector Network, user interaction Required, with a Changed scope and Confidentiality/Integrity...

CVE-2020-20521

Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter...

CVE-2021-3267

CVE-2021-3267 relates to KiteCMS v1.1 where a flaw in the uploadFile function allows a remote attacker to execute arbitrary code. The issue is confirmed across multiple reputable sources in the connected set, all describing a file-upload vulnerability that enables code execution. Practical impact...

CVE-2021-31707

CVE-2021-31707 affects KiteCMS. A permissions issue in the upload file type allows a remote attacker to execute arbitrary code. The vulnerability is characterized by a high-severity CVSS v3.1 score (9.8, CRITICAL) with network access, no privileges required, and no user interaction needed, and it...

CVE-2021-36546

Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...

CVE-2021-36546

Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...

Improper access control

Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...

CVE-2021-36546

Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...

PT-2023-12289 · Kitecms · Kitecms

Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: An issue with access control in KiteCMS allows remote attackers to view sensitive information by manipulating the path in the application URL. Recommendations: For KiteCMS version 1.1, update to a version that...

KiteCMS 安全漏洞

KiteCMS is a website CMS. A security vulnerability exists in KiteCMS version 1.1, which stems from an incorrect access control issue that can be exploited by a remote attacker to view sensitive information via a path in the application URL...

CVE-2021-36546

Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...

CVE-2021-36546

KiteCMS 1.1 is affected by an Incorrect Access Control issue that lets remote attackers view sensitive information by manipulating the path in the application URL. The vulnerability impacts confidentiality (C:H) with no listed impact on integrity or availability in the provided documents. The CVE...

CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

Design/Logic Flaw

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...

CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...