95 matches found
CVE-2020-20521
CVE-2020-20521 is a Cross Site Scripting vulnerability in KiteCMS v1.1 that enables a remote attacker to execute arbitrary code via the comment parameter. The CVSS v3.1 base score is 6.1 (Medium); attack vector Network, user interaction Required, with a Changed scope and Confidentiality/Integrity...
CVE-2020-20522
CVE-2020-20522 affects KiteCMS v1.1. The vulnerability is described as a Cross Site Scripting issue that allows a remote attacker to execute arbitrary code via the registering user parameter. Public sources across multiple feeds corroborate the same description. The connected documents do not pro...
CVE-2021-3267
File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function...
KiteCMS 跨站脚本漏洞
KiteCMS is a website CMS. A security vulnerability exists in KiteCMS v.1.1. An attacker can exploit this vulnerability to execute arbitrary code via the registering user parameter...
CVE-2021-3267
File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function...
CVE-2021-31707
CVE-2021-31707 affects KiteCMS. A permissions issue in the upload file type allows a remote attacker to execute arbitrary code. The vulnerability is characterized by a high-severity CVSS v3.1 score (9.8, CRITICAL) with network access, no privileges required, and no user interaction needed, and it...
PT-2023-11554 · Kitecms · Kitecms
Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the comment parameter. Recommendations: For KiteCMS version 1.1, avoid using the comment parameter until a fix is available. ...
PT-2023-12173 · Kitecms · Kitecms
Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: A File Upload issue allows a remote attacker to execute arbitrary code via the uploadFile function. This enables the attacker to potentially gain control over the system. Recommendations: For KiteCMS version...
CVE-2021-36546
Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...
CVE-2021-36546
Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...
Improper access control
Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...
CVE-2021-36546
KiteCMS 1.1 is affected by an Incorrect Access Control issue that lets remote attackers view sensitive information by manipulating the path in the application URL. The vulnerability impacts confidentiality (C:H) with no listed impact on integrity or availability in the provided documents. The CVE...
KiteCMS 安全漏洞
KiteCMS is a website CMS. A security vulnerability exists in KiteCMS version 1.1, which stems from an incorrect access control issue that can be exploited by a remote attacker to view sensitive information via a path in the application URL...
PT-2023-12289 · Kitecms · Kitecms
Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: An issue with access control in KiteCMS allows remote attackers to view sensitive information by manipulating the path in the application URL. Recommendations: For KiteCMS version 1.1, update to a version that...
CVE-2021-36546
Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...
CVE-2021-36546
Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...
CVE-2022-28445
KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...
CVE-2022-28445
KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module...