Lucene search
K

131 matches found

Packet Storm
Packet Storm
added 2026/02/16 12:0 a.m.102 views

📄 PopojiCMS 2.0.1 Code Injection

PopojiCMS version 2.0.1 remote PHP code injection proof of concept exploit. ============================================================================================================================================= | Title : PopojiCMS 2.0.1 PHP COde Injection Vulnerability | | Author : indoush...

5.7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/09 12:37 p.m.3 views

CVE-2023-50011

PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field...

7.2CVSS7.2AI score0.03303EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:25 a.m.7 views

CVE-2021-28070

Cross Site Request Forgery CSRF vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user=multidelete...

4.3CVSS7.1AI score0.00098EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:19 a.m.3 views

CVE-2019-18815

PopojiCMS 2.0.1 allows refer= Open Redirection...

6.1CVSS7AI score0.00285EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:17 a.m.2 views

CVE-2019-18816

po-admin/route.php?mod=post=edit in PopojiCMS 2.0.1 allows post1content= stored XSS...

6.1CVSS6.7AI score0.0033EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/11 10:1 p.m.2 views

CVE-2024-58284

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands...

8.6CVSS7.7AI score0.00854EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/11 12:30 a.m.3 views

EUVD-2024-55314

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands...

8.6CVSS7.1AI score0.00854EPSS
Exploits1References6
NVD
NVD
added 2025/12/10 10:16 p.m.3 views

CVE-2024-58284

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands...

8.6CVSS0.00854EPSS
Exploits1References5
OSV
OSV
added 2025/12/10 10:16 p.m.1 views

CVE-2024-58284

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands...

7.2CVSS7.6AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/12/10 9:15 p.m.1 views

CVE-2024-58284 PopojiCMS 2.0.1 Remote Command Execution via Authenticated Metadata Settings

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands...

8.6CVSS7.3AI score0.00854EPSS
Exploits1References5
CVE
CVE
added 2025/12/10 9:15 p.m.4 views

CVE-2024-58284

CVE-2024-58284 affects PopojiCMS 2.0.1. Descriptions across multiple sources indicate an authenticated remote command execution vulnerability that lets an administrative user inject malicious PHP code via the metadata settings endpoint. An attacker who can log in can modify meta content to create...

8.6CVSS7.3AI score0.00854EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/10 9:15 p.m.17 views

CVE-2024-58284 PopojiCMS 2.0.1 Remote Command Execution via Authenticated Metadata Settings

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands...

8.6CVSS0.00854EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.2 views

PopojiCMS 代码注入漏洞

PopojiCMS is an open source website builder from PopojiCMS. A code injection vulnerability exists in PopojiCMS version 2.0.1, which originates from an administrator user can inject malicious PHP code via a metadata settings endpoint, which may result in remote command execution...

8.6CVSS7.7AI score0.00854EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.4 views

PT-2025-50533

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands...

8.6CVSS7.7AI score0.00854EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-14776

Malware in sbrugna...

4.3CVSS4.8AI score0.00098EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-8520

Malware in sbrugna...

6.1CVSS6.3AI score0.0033EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-11451

Malware in sbrugna...

6.5CVSS6.5AI score0.00393EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-18921

Malware in sbrugna...

8.8CVSS8.8AI score0.00141EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-10642

Malware in sbrugna...

7.5CVSS7.6AI score0.00553EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-10640

Malware in sbrugna...

9.8CVSS9.5AI score0.00122EPSS
Exploits1References3
Rows per page
Query Builder