Lucene search
+L

174 matches found

NVD
NVD
•added 2026/05/27 5:16 p.m.•33 views

CVE-2026-38930

OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component. This vulnerability is exploited via injecting a crafted SQL payload into the name cookie parameter...

6.5CVSS0.00352EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•25 views

PT-2026-44038

Name of the Vulnerable Software and Affected Versions OpenRapid RapidCMS version 1.3.1 Description An authentication bypass exists in the '/template/default/menu.php' endpoint. This issue occurs when a crafted SQL payload is injected into the name cookie parameter, allowing an attacker to...

6.5CVSS6AI score0.00352EPSS
SaveExploits0References5
CVE
CVE
•added 2026/05/27 12:00 a.m.•49 views

CVE-2026-38930

OpenRapid RapidCMS v1.3.1 contains an authentication bypass vulnerability in the /template/default/menu.php component. The flaw is caused by the improper neutralization of special elements used in an SQL command, which allows an attacker to bypass authentication by injecting a crafted SQL payload...

6.5CVSS5.9AI score0.00352EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/27 12:00 a.m.•59 views

CVE-2026-38930

OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component. This vulnerability is exploited via injecting a crafted SQL payload into the name cookie parameter...

0.00352EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/27 12:00 a.m.•13 views

CVE-2026-38930

OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component. This vulnerability is exploited via injecting a crafted SQL payload into the name cookie parameter...

5.9AI score0.00352EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/27 12:00 a.m.•13 views

CVE-2026-38930

OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component. This vulnerability is exploited via injecting a crafted SQL payload into the name cookie parameter...

6.5CVSS5.9AI score0.00352EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•20 views

OpenRapid RapidCMS 安全漏洞

OpenRapid RapidCMS is a fast, simple, and useful CMS system developed under the OpenRapid open-source framework. Version 1.3.1 of OpenRapid RapidCMS contains a security vulnerability. This vulnerability stems from a flaw in the /template/default/menu.php component, where authentication bypasses a...

6.5CVSS5.8AI score0.00352EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•2 views

CVE-2026-38930: Improper Neutralization of Special Elements used in an SQL Command

OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component. This vulnerability is exploited via injecting a crafted SQL payload into the name cookie parameter...

6.5CVSS5.8AI score0.00352EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:26 a.m.•22 views

CVE-2023-4446

A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associate...

9.8CVSS7.3AI score0.00736EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:25 a.m.•17 views

CVE-2023-4447

A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

9.8CVSS8.1AI score0.00639EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/25 12:17 a.m.•23 views

CVE-2025-64047

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /user/user-move.php...

6.1CVSS6.2AI score0.00181EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/24 8:15 p.m.•18 views

CVE-2025-64047

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /user/user-move.php...

6.1CVSS0.00181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/24 12:00 a.m.•8 views

CVE-2025-64047

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /user/user-move.php...

5.8AI score0.00181EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•1 views

CVE-2025-64047: Improper Neutralization of Input During Web Page Generation

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /user/user-move.php...

6.1CVSS5.7AI score0.00181EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/11/24 12:00 a.m.•30 views

CVE-2025-64047

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /user/user-move.php...

0.00181EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/24 12:00 a.m.•35 views

CVE-2025-64047

The OpenRapid RapidCMS version 1.3.1 is vulnerable to a Cross Site Scripting (XSS) flaw located in the /user/user-move.php file. This vulnerability originates from the improper neutralization of input during web page generation, potentially allowing an attacker to execute malicious scripts in a u...

6.1CVSS5.8AI score0.00181EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•27 views

OpenRapid RapidCMS 安全漏洞

OpenRapid RapidCMS is a fast and easy to use CMS system from OpenRapid open source. A security vulnerability exists in OpenRapid RapidCMS version 1.3.1, which originates from a cross-site scripting vulnerability in /user/user-move.php...

6.1CVSS6.1AI score0.00181EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•21 views

PT-2025-47954

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /user/user-move.php...

6.1CVSS6.2AI score0.00181EPSS
SaveExploits0References3
OSV
OSV
•added 2025/11/24 12:00 a.m.•17 views

CVE-2025-64047

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /user/user-move.php...

6.1CVSS6.2AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/11/18 12:11 a.m.•26 views

CVE-2025-64046

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /system/update-run.php...

6.1CVSS6.2AI score0.00181EPSS
SaveExploits0References1
Rows per page
Query Builder