36 matches found
CVE-2024-55089
Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...
CVE-2024-55089
Rhymix 2.1.19 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function. The issue’s affected component is Rhymix (CMS/framework), with the root cause being insecure handling of server-side requests during the import process. Reported impact includes potential una...
Rhymix 安全漏洞
Rhymix is an open source CMS and framework from Rhymix Inc. A security vulnerability exists in Rhymix version 2.1.19, which stems from a server-side request forgery vulnerability in the backend import data function...
CVE-2024-55089
Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...
CVE-2024-55089
Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...
Rhymix CMS Cross-Site Scripting Vulnerability
Rhymix CMS is a PHP-based content management system CMS. A cross-site scripting vulnerability exists in the index.php?module=admin&act=dispModuleAdminFileBox page in Rhymix CMS version 1.9.8.1, which can be exploited by remote attackers to inject arbitrary web script or HTML by uploading a...
Cross site scripting
Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...
CVE-2018-19601
Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...
Design/Logic Flaw
Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...
CVE-2018-19601
Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...
CVE-2018-19600
Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...
CVE-2018-19600
Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...
CVE-2018-19600
Rhymix CMS 1.9.8.1 is affected by a Cross‑Site Scripting (XSS) vulnerability in the index.php?module=admin&act=dispModuleAdminFileBox page, exploitable by uploading a specially crafted SVG file. The root cause is the handling of SVG uploads that allows injected scripts/HTML to execute in the cont...
CVE-2018-19600
Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...
CVE-2018-19601
CVE-2018-19601 : Rhymix CMS 1.9.8.1 is affected by an SSRF via an SVG upload in index.php?module=admin&act=dispModuleAdminFileBox. The entry documents an SSRF risk but provides no public details on affected files beyond the described vector. CVSS metrics indicate high/severe impact (CVSS3 base sc...