CVE-2023-44767: Improper Neutralization of Input During Web Page Generation

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2026-05345)

RiteCMS is an open source content management system based on php and sqlite. RiteCMS suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code in the Main Menu Items of the Administration Menu via a specially crafted payload...

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2026-05346)

RiteCMS is an open source content management system based on php and sqlite. RiteCMS suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code via a specially crafted payload in Global Content Blocks in the Administration Menu...

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2026-05347)

RiteCMS is an open source content management system based on php and sqlite. RiteCMS has a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the Home Page field, which can be exploited by an attacker to execute arbitrary Web...

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A security vulnerability exists in Rite CMS version 3.0 that stems from a cross-site scripting XSS vulnerability in the Home Page field...

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS version 3.0. An attacker can exploit this vulnerability to execute arbitrary code in Global Content Blocks in the Administration Menu via a specially crafted payload...

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS version 3.0. An attacker can exploit this vulnerability to execute arbitrary code in the Main Menu Items of the Administration Menu via a specially crafted payload...

RiteCMS Directory Traversal (CVE-2022-24248)

A directory traversal vulnerability exists in RiteCMS. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

RiteCMS Remote Code Execution (CVE-2021-46367)

A remote code execution vulnerability exists in RiteCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

RiteCMS path traversal vulnerability

RiteCMS is a web CMS. A path traversal vulnerability exists in RiteCM, which can be exploited by an authenticated attacker to delete any file in the web root directory...

RiteCMS arbitrary file upload vulnerability

RiteCMS is a web CMS. RiteCMS 3.1.0 and earlier contain an arbitrary file upload vulnerability that allows an authenticated attacker to upload PHP files and bypass the .htacess configuration to execute .php files in the media and files directories for remote command execution...

RiteCMS arbitrary file overwrite vulnerability

RiteCMS is a web CMS. An arbitrary file overwrite vulnerability exists in RiteCMS versions 3.1.0 and below, which stems from the failure of a web system or product to properly filter special elements in a resource or file path, and can be exploited by an authenticated attacker to overwrite any fi...

CVE-2022-24247

RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to overwrite any file in the web root along with any other file on the server that the PHP process user has the...

CVE-2022-24247

RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to overwrite any file in the web root along with any other file on the server that the PHP process user has the...

CVE-2022-24248

RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to delete any file in the web root along with any other file on the server that the PHP process user has the prope...

CVE-2022-24248

RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to delete any file in the web root along with any other file on the server that the PHP process user has the prope...

Path traversal

RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to delete any file in the web root along with any other file on the server that the PHP process user has the prope...

Path traversal

RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to overwrite any file in the web root along with any other file on the server that the PHP process user has the...