Greencms@2.3.0603 Security Vulnerabilities and Issues — Greencms@2.3.0603 CVE List

Lucene search

NjtechGreencms2.3.0603

4 matches found

CVE•added 2022/04/26 9:15 p.m.•70 views

CVE-2022-28918

GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&plugin_name=.

8.1CVSS8.1AI score0.00222EPSS

CVE•added 2018/06/20 7:29 p.m.•50 views

CVE-2018-12604

GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.

7.5CVSS7.2AI score0.19448EPSS

CVE•added 2018/06/01 5:29 p.m.•49 views

CVE-2018-11671

An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an admin account via index.php?m=admin&c=access&a=adduserhandle.

8.8CVSS8.6AI score0.00245EPSS

CVE•added 2018/06/01 5:29 p.m.•48 views

CVE-2018-11670

An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to execute arbitrary PHP code via the content parameter to index.php?m=admin&c=media&a=fileconnect.

8.8CVSS8.9AI score0.00245EPSS