CVE-2023-39376 SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network

SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network...

CVE-2023-39376

CVE-2023-39376 concerns SiberianCMS with an improper access control flaw (CWE-284): an authorized user may disable a security feature over the network . Multiple sources (NVD, OSV, PRION, CNNVD, CVE lists) confirm the issue exists in SiberianCMS; however, the provided documents do not specify aff...

CVE-2023-39375 SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges

SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges...

CVE-2023-39375

CVE-2023-39375 affects SiberianCMS (SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges). The available documents describe a privilege-handling flaw that can lead to high-impact effects (confidentiality, integrity, and availability) with network access and no required privileges, ...

CVE-2023-39375 SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges

SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges...

PT-2023-26904 · Unknown · Siberiancms

Name of the Vulnerable Software and Affected Versions: SiberianCMS affected versions not specified Description: The issue is related to improper handling of insufficient privileges, which can lead to security concerns. There is no information provided about the estimated number of potentially...

PT-2023-26905 · Unknown · Siberiancms

Name of the Vulnerable Software and Affected Versions: SiberianCMS affected versions not specified Description: The issue concerns improper access control, allowing an authorized user to disable a security feature over the network. Recommendations: At the moment, there is no information about a...

PT-2023-26906 · Unknown · Siberiancms

Name of the Vulnerable Software and Affected Versions: SiberianCMS affected versions not specified Description: A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method. This issue is related to the unrestricted upload of files with...

CVE-2017-6906

An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

CVE-2017-6906

An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

CVE-2017-6906

An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data log passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

CVE-2017-6906

SiberianCMS before 4.10.0 is vulnerable due to insufficient filtration of user-supplied data (log) passed to SiberianCMS-master/errors/500.php, allowing an attacker to execute arbitrary HTML/JavaScript in the context of the vulnerable website. This risk is documented with CVSS metrics (MEDIUM). N...