Lucene search
+L

5 matches found

Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•16 views

PT-2023-32848 · Codelyfe · Codelyfe Stupid Simple Cms

Name of the Vulnerable Software and Affected Versions: codelyfe Stupid Simple CMS versions up to 1.2.4 Description: A problematic issue was discovered in the file /file-manager/rename.php, where an unknown functionality is affected. The manipulation of the oldName argument leads to path traversal...

6.5CVSS4.8AI score0.00764EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•2 views

CVE-2023-7040: Path Traversal: '../filedir'

A vulnerability classified as problematic was found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this vulnerability is an unknown functionality of the file /file-manager/rename.php. The manipulation of the argument oldName leads to path traversal: '../filedir'. The attack can be launche...

6.5CVSS5.3AI score0.00764EPSS
SaveExploits1References2
OSV
OSV
•added 2022/08/26 7:15 p.m.•12 views

CVE-2022-36529

Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at /framework/mod/db/DBMapper.xml...

8.8CVSS5.8AI score0.0103EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/08/26 7:15 p.m.•12 views

CVE-2022-36529

Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at /framework/mod/db/DBMapper.xml...

8.8CVSS7.4AI score0.0103EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/26 12:00 a.m.•5 views

CVE-2022-36529: Improper Neutralization of Special Elements used in an SQL Command

Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at /framework/mod/db/DBMapper.xml...

8.8CVSS7.8AI score0.0103EPSS
SaveExploits1References2
Rows per page
Query Builder