177 matches found
CVE-2022-24247
RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to overwrite any file in the web root along with any other file on the server that the PHP process user has the...
CVE-2022-24248
RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to delete any file in the web root along with any other file on the server that the PHP process user has the prope...
CVE-2020-23934
An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section...
RiteCMS Cross-Site Scripting Vulnerability (CNVD-2025-21552)
RiteCMS is an open source content management system based on PHP and SQLite. RiteCMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the component mainmenu/editsection, which can be exploited by an attacker to...
CVE-2024-28623
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
Cross site scripting
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
CVE-2024-28623
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
CVE-2024-28623
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
CVE-2024-28623
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
CVE-2024-28623: Improper Neutralization of Input During Web Page Generation
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
CVE-2024-28623
RiteCMS v3.0.0 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability in the main_menu/edit_section component. The flaw stems from a lack of effective filtering and escaping of user-supplied data, allowing an attacker to inject and execute arbitrary JavaScript in a victim's browser...
PT-2024-22496
Name of the Vulnerable Software and Affected Versions RiteCMS version 3.0.0 Description A cross-site scripting XSS issue was found in the main menu/edit section component. This allows for potential XSS attacks. Recommendations For RiteCMS version 3.0.0, consider disabling access to the main...
RiteCMS Cross-Site Scripting Vulnerability (CNVD-2023-86334)
RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS v3.0, which stems from the application's lack of effective validation of uploaded files. The vulnerability can be exploited to remotely execute arbitrary code by uploading malicious files...
CVE-2023-44767
A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...
CVE-2023-44767
A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...
Unrestricted file upload
A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...
RiteCMS 跨站脚本漏洞
RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS v3.0, which stems from the application's lack of effective validation of uploaded files. The vulnerability can be exploited to remotely execute arbitrary code by uploading malicious files...
CVE-2023-44767
A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...
CVE-2023-44767: Improper Neutralization of Input During Web Page Generation
A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...