CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Mend•added 2019/01/03 8:00 p.m.•7 views

CVE-2018-19601

Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...

9.4CVSS0.01439EPSS

SaveExploits1References2

Mend•added 2019/01/03 8:00 p.m.•7 views

CVE-2018-19600

Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...

4.8CVSS0.00668EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2019/01/03 12:00 a.m.•7 views

CVE-2018-19601: Server-Side Request Forgery (SSRF)

Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload...

9.1CVSS5.8AI score0.01439EPSS

SaveExploits1References2

Positive Technologies•added 2019/01/03 12:00 a.m.•8 views

PT-2019-9874

Name of the Vulnerable Software and Affected Versions Rhymix CMS version 1.9.8.1 Description The issue allows for Server-Side Request Forgery SSRF via an SVG upload in the admin module. This can be achieved by accessing the "index.php?module=admin&act=dispModuleAdminFileBox" endpoint with a...

9.1CVSS0.01439EPSS

SaveExploits1References4

Positive Technologies•added 2019/01/03 12:00 a.m.•10 views

PT-2019-9873

Name of the Vulnerable Software and Affected Versions Rhymix CMS version 1.9.8.1 Description The issue allows for XSS via an SVG upload in the "index.php?module=admin&act=dispModuleAdminFileBox" endpoint, specifically through the upload of malicious SVG files. Recommendations For Rhymix CMS versi...

4.8CVSS0.00668EPSS

SaveExploits1References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by