CVE-2022-26272

Ionize CMS is affected by a remote code execution vulnerability (CVE-2022-26272) in Ionize v1.0.8.1. The issue allows an attacker to execute arbitrary code by supplying a crafted string written to the file application/config/config.php. Public sources consistently describe this as an RCE without ...

CVE-2022-29306

IonizeCMS v1.0.8.1 is affected by a SQL injection in the id_page parameter of application/models/article_model.php (CVE-2022-29306). The vulnerability is confirmed by multiple sources in the connected documents, with CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5 (HIGH), indicating ...

CVE-2022-29307

IonizeCMS v1.0.8.1 contains a command-injection vulnerability in copy_lang_content() within application/models/lang_model.php, allowing remote attackers to execute arbitrary commands. Multiple connected sources (RH/CVE-2022-29307, NVD, OSV, other advisories) describe this as a remote code executi...

CVE-2017-5961

Ionize versions up to 1.0.8 (IONIZE CMS built on CodeIgniter) are affected by an XSS vulnerability due to insufficient filtration of user-supplied data in the path parameter of the URL to ionize-master/themes/admin/javascript/tinymce/jscripts/tiny_mce/plugins/codemirror/dialog.php. This could all...