CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2026/01/02 12:00 a.m.•0 views

CVE-2025-15423: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The...

8.8CVSS6AI score0.00357EPSS

SaveExploits1References1

Prion•added 2018/02/12 3:29 a.m.•26 views

Code injection

EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php...

5CVSS5.4AI score0.01789EPSS

SaveExploits1References2Affected Software1

NVD•added 2018/02/12 3:29 a.m.•23 views

CVE-2018-6880

EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php...

5.3CVSS5.4AI score0.01789EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by