CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

198 matches found

cnnvd•added 2025/12/17 12:0 a.m.•6 views

Pagekit 安全漏洞

Pagekit is a modular, lightweight CMS Content Management System from Pagekit Open Source. A security vulnerability exists in Pagekit version 1.0.18, which stems from the presence of an insecure direct object reference that could lead to elevation of privilege...

9.8CVSS6.4AI score0.00429EPSS

Exploits1References5

cve•added 2025/12/17 12:0 a.m.•13 views

CVE-2025-67165

The CVE-2025-67165 entry concerns Pagekit CMS v1.0.18 with an Insecure Direct Object Reference (IDOR) in the User Role component that can lead to privilege escalation. The Root Cause described across sources is insufficient access control, enabling a crafted request (notably via the /api/user/rol...

9.8CVSS6.8AI score0.00429EPSS

Exploits1References4Affected Software1

osv•added 2025/12/17 12:0 a.m.•6 views

CVE-2025-67164

An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file...

9.9CVSS7.5AI score0.0045EPSS

Exploits1References3

ptsecurity•added 2025/12/17 12:0 a.m.•10 views

PT-2025-51846

Name of the Vulnerable Software and Affected Versions Pagekit CMS version 1.0.18 Description An Insecure Direct Object Reference IDOR exists in Pagekit CMS version 1.0.18, potentially allowing attackers to escalate privileges. An IDOR occurs when an application uses user-supplied input to directl...

9.8CVSS6.9AI score0.00429EPSS

Exploits1References8

cve•added 2025/12/17 12:0 a.m.•21 views

CVE-2025-67164

Pagekit CMS v1.0.18 is affected by an authenticated arbitrary file upload vulnerability in the /storage/poc.php component. Uploading a crafted PHP file allows attackers to execute arbitrary code on the server. The root cause is an insecure file upload vector within the storage component, enabling...

9.9CVSS7.4AI score0.0045EPSS

Exploits1References1Affected Software1

cvelist•added 2025/12/17 12:0 a.m.•32 views

CVE-2025-67164

An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file...

0.0045EPSS

Exploits1References1

cvelist•added 2025/12/17 12:0 a.m.•33 views

CVE-2025-67165

An Insecure Direct Object Reference IDOR in Pagekit CMS v1.0.18 allows attackers to escalate privileges...

0.00429EPSS

Exploits1References4