177 matches found
CVE-2025-67168
The open-source content management system RiteCMS v3.1.0 (based on PHP and SQLite) is vulnerable to the use of insecure encryption for storing passwords. This flaw is associated with CWE-916 , which involves using password hashes with insufficient computational effort. No specific remediation or ...
CVE-2025-67173
The open-source content management system RiteCMS v3.1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in its page creation and editing functions. The root cause is that these functions fail to adequately verify if a request originates from a trusted user. An attacker can exploit this...
CVE-2025-67170
RiteCMS v3.1.0 , an open-source content management system based on PHP and SQLite , contains a reflected cross-site scripting (XSS) vulnerability. The root cause is the application's lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject and execute arb...
CVE-2025-67170
A reflected cross-site scripting XSS vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload...
CVE-2025-67171
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal...
PT-2025-51857
A Cross-Site Request Forgery CSRF in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request...
CVE-2025-67172
RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution RCE vulnerability via the parsespecialtags function...
RiteCMS 安全漏洞
RiteCMS is an open source content management system based on php and sqlite. RiteCMS suffers from an improper access control vulnerability that stems from a lack of validity checking of paths in the /templates/ component when processing directory requests, which can be exploited by an attacker to...
RiteCMS 安全漏洞
RiteCMS is an open source content management system based on php and sqlite. An unspecified vulnerability exists in RiteCMS that stems from the use of insecure encryption to store passwords. No detailed vulnerability details are provided at this time...
CVE-2025-67170: Improper Input Validation
A reflected cross-site scripting XSS vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload...
CVE-2025-67174
A local file inclusion LFI vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the adminlanguagefile and defaultpagelanguagefile in the admin.php component...
CVE-2025-67171
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal...
CVE-2025-67174
RiteCMS v3.1.0 contains a local file inclusion (LFI) vulnerability in the admin.php component, exploitable via directory traversal in admin_language_file and default_page_language_file. The issue allows an attacker to read arbitrary files on the host. Multiple connected sources (CNVD-2026-05343, ...
CVE-2025-67172
The open source content management system RiteCMS v3.1.0 (based on PHP and SQLite) is vulnerable to authenticated remote code execution (RCE) . The flaw originates from the parse_special_tags() function, where a lack of proper neutralization of special elements allows an attacker to execute arbit...
CVE-2025-67171
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal...
RiteCMS 安全漏洞
RiteCMS is an open source content management system based on php and sqlite. RiteCMS has a code execution vulnerability that stems from a flaw in the parsespecialtags function, which can be exploited by an attacker to cause remote code execution...
CVE-2025-67174: Improper Limitation of a Pathname to a Restricted Directory
A local file inclusion LFI vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the adminlanguagefile and defaultpagelanguagefile in the admin.php component...
CVE-2025-67173: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request...