542 matches found
CVE-2023-48204
An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...
PT-2023-30729 · Publiccms · Publiccms
Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202302.e Description: The issue allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the "api/method/getHtml" component. Recommendations: For PublicCMS version 4.0.202302....
CVE-2023-48204
PublicCMS v4.0.202302.e contains an SSRF/information disclosure issue in the api/method/getHtml component that allows remote attackers to obtain sensitive data via the appToken and Parameters parameters. Affected component: getHtml; vector: remote access (no user interaction) with low privileges;...
CVE-2023-48204: Server-Side Request Forgery (SSRF)
An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...
CVE-2023-48204
An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...
CVE-2023-34852
PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...
CVE-2023-34852
PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...
Design/Logic Flaw
PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...
CVE-2023-34852
PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...
PT-2023-25033 · Publiccms · Publiccms
Name of the Vulnerable Software and Affected Versions: PublicCMS versions prior to 4.0.202302 Description: The issue is related to Insecure Permissions. Recommendations: For versions prior to 4.0.202302, update to a version that includes the necessary security fixes to resolve the Insecure...
CVE-2023-34852: Incorrect Permission Assignment for Critical Resource
PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...
CVE-2023-34852
PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...
CVE-2023-34852
PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...
CVE-2023-34852
PublicCMS is affected by CVE-2023-34852 (versions prior to 4.0.202302). The issue is described as Insecure Permissions in PublicCMS
CVE-2020-20914
SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...
CVE-2020-20914
SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...
CVE-2020-20915
SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...
CVE-2020-20915
SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...