52 matches found
CVE-2023-39377
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...
CVE-2023-39378
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' by an unauthenticated user...
CVE-2023-39377
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...
CVE-2023-39378
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' by an unauthenticated user...
CVE-2023-39375
SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges...
CVE-2023-39376
SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network...
CVE-2023-39376
SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network...
CVE-2023-39375
SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges...
Design/Logic Flaw
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...
Design/Logic Flaw
SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges...
Sql injection
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' by an unauthenticated user...
SiberianCMS SQL Injection Vulnerability
Siberian is an open source CMS from Siberian. A SQL injection vulnerability exists in SiberianCMS. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...
SiberianCMS Code Issues Vulnerabilities
Siberian is an open source CMS from Siberian. A code issue vulnerability exists in SiberianCMS. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...
CVE-2023-39378 SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' by an unauthenticated user...
CVE-2023-39378 SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' by an unauthenticated user...
CVE-2023-39378
SiberianCMS is affected by CVE-2023-39378: an SQL Injection vulnerability (CWE-89) that can be exploited by an unauthenticated attacker over the network. The root cause is improper neutralization of special elements in SQL commands within SiberianCMS components; this yields potentially high impac...
CVE-2023-39377 SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...
CVE-2023-39377 SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method...
CVE-2023-39377
CVE-2023-39377 (SiberianCMS) involves a CWE-434 vulnerability: unrestricted upload of a file with a dangerous type by an account with administrative privileges, potentially allowing upload of dangerous files via an unspecified method. Public records assign a high impact (CVSS v3.1: AV:N/AC:L/PR:H...
CVE-2023-39376 SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network
SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network...