CVE-2023-48204

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...

CVE-2023-48204

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...

PT-2023-30729 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202302.e Description: The issue allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the "api/method/getHtml" component. Recommendations: For PublicCMS version 4.0.202302....

CVE-2023-48204

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

Design/Logic Flaw

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS is affected by CVE-2023-34852 (versions prior to 4.0.202302). The issue is described as Insecure Permissions in PublicCMS

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

PT-2023-25033 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS versions prior to 4.0.202302 Description: The issue is related to Insecure Permissions. Recommendations: For versions prior to 4.0.202302, update to a version that includes the necessary security fixes to resolve the Insecure...

CVE-2020-20915

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20914

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

CVE-2020-20915

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20914

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

Sql injection

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

Sql injection

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20914

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

CVE-2020-20915

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...