Lucene search
K

7 matches found

OSV
OSV
added 2025/08/25 7:15 p.m.1 views

CVE-2025-9415

A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. The manipulation of the argument upload leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available...

9.8CVSS6.8AI score
Exploits0References4
NVD
NVD
added 2025/08/25 7:15 p.m.4 views

CVE-2025-9415

A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. The manipulation of the argument upload leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available...

9.8CVSS0.00106EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/08/25 7:2 p.m.8 views

CVE-2025-9415 GreenCMS index.php unrestricted upload

A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. The manipulation of the argument upload leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available...

6.5CVSS0.00106EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/08/25 7:2 p.m.3 views

CVE-2025-9415 GreenCMS index.php unrestricted upload

A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. The manipulation of the argument upload leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available...

6.5CVSS7.1AI score0.00106EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/08/25 12:0 a.m.3 views

PT-2025-34699

Name of the Vulnerable Software and Affected Versions: GreenCMS versions prior to 2.3.0604 Description: A vulnerability exists in GreenCMS that allows for unrestricted file upload. The issue is located in an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. Manipulation of the...

9.8CVSS6.4AI score0.00106EPSS
Exploits1References9
Exploit DB
Exploit DB
added 2018/06/03 12:0 a.m.83 views

GreenCMS 2.3.0603 - Cross-Site Request Forgery / Remote Code Execution

Exploit Title: GreenCMS v2.3.0603 CSRF vulnerability get webshell Date: 2018-06-02 Exploit Author: xichao Vendor Homepage: https://github.com/GreenCMS/GreenCMS Software Link: https://github.com/GreenCMS/GreenCMS Version: v2.3.0603 CVE : CVE-2018-11670 An issue was discovered in GreenCMS v2.3.0603...

8.8CVSS8.8AI score0.00233EPSS
Exploits5
Prion
Prion
added 2018/06/01 5:29 p.m.23 views

Cross site request forgery (csrf)

An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to execute arbitrary PHP code via the content parameter to index.php?m=admin&c=media&a=fileconnect...

6.8CVSS8.9AI score0.00233EPSS
Exploits5References2Affected Software1
Rows per page
Query Builder