CVE-2023-48204

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...

CVE-2023-48204

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...

CVE-2023-48204

PublicCMS v4.0.202302.e contains an SSRF/information disclosure issue in the api/method/getHtml component that allows remote attackers to obtain sensitive data via the appToken and Parameters parameters. Affected component: getHtml; vector: remote access (no user interaction) with low privileges;...

CVE-2023-48204

An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Parameters parameter of the api/method/getHtml component...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

Design/Logic Flaw

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS is affected by CVE-2023-34852 (versions prior to 4.0.202302). The issue is described as Insecure Permissions in PublicCMS

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

PT-2023-25033 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS versions prior to 4.0.202302 Description: The issue is related to Insecure Permissions. Recommendations: For versions prior to 4.0.202302, update to a version that includes the necessary security fixes to resolve the Insecure...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2023-34852

PublicCMS =V4.0.202302 is vulnerable to Insecure Permissions...

CVE-2020-20915

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20914

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

CVE-2020-20915

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20914

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

Sql injection

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...

Sql injection

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20915

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20914

SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...