CVE-2021-3242

CVE-2021-3242 affects DuxCMS v3.1.3. A SQL injection vulnerability exists via the component s/tools/SendTpl/index?keyword=, allowing manipulation of the database through that parameter. The connected Red Hat, OSV, NVD and CVE data confirm the same vector without detailing exploit specifics or ava...

CVE-2020-36609

CVE-2020-36609 affects annyshow DuxCMS 2.1. The vulnerability is a cross-site scripting in the Article Handler’s file admin.php&r=article/AdminContent/edit, triggered by manipulating the content parameter. Attacks can be initiated remotely and public exploit information exists. No patch/version f...

CVE-2020-21881

DuxCMS 2.1 contains a Cross Site Request Forgery (CSRF) vulnerability in admin.php (endpoint article/admin/content/add) that allows remote attackers to modify application data. The issue is documented across multiple sources (e.g., CVE-2020-21881) with remediation guidance suggesting CSRF token v...

CVE-2020-36763

CVE-2020-36763 involves a Cross-Site Scripting (XSS) flaw in DuxCMS 2.1. The issue allows remote attackers to execute arbitrary scripts by manipulating the content , time , and copyfrom parameters when adding or editing a post. Root cause: insufficient input validation/escaping in these fields. I...

CVE-2020-36610

CVE-2020-36610 affects annyshow DuxCMS 2.1. The issue is a cross-site request forgery caused by manipulation of unknown code. The attack can be initiated remotely and exploitation has been disclosed publicly. No concrete patch/version mitigation is provided in the supplied documents; remediation ...

CVE-2020-21861

CVE-2020-21861 concerns DuxCMS 2.1 with a file upload vulnerability in duxcms/AdminUpload/upload that allows attackers to execute arbitrary PHP code. The affected software is DuxCMS 2.1; the vulnerable trigger is the AdminUpload/upload endpoint, enabling arbitrary code execution with high impact ...

CVE-2020-21862

CVE-2020-21862 is a directory traversal vulnerability in DuxCMS 2.1 that allows an attacker to delete arbitrary files via the /admin/AdminBackup/del endpoint. The issue is rooted in a traversal flaw in the AdminBackup API, enabling unauthorized file deletion and potential data loss. Public detail...