Damicms Security Vulnerabilities and Issues — Damicms CVE List

Lucene search

DamicmsDamicms

3 matches found

CVE•added 2018/08/30 10:29 p.m.•35 views

CVE-2018-16237

An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=Tpl/Add/id/c:|windows|win.ini URI.

4CVSS4.1AI score0.00255EPSS

Web

CVE•added 2021/08/12 6:15 p.m.•35 views

CVE-2020-18451

Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.

4.8CVSS4.9AI score0.00235EPSS

CVE•added 2019/07/10 3:15 p.m.•30 views

CVE-2018-14831

An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI.

4.9CVSS4.8AI score0.00271EPSS

Web