Greencms Security Vulnerabilities and Issues — Greencms CVE List

Lucene search

NjtechGreencms

4 matches found

CVE•added 2022/04/26 9:15 p.m.•70 views

CVE-2022-28918

GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&plugin_name=.

8.1CVSS8.1AI score0.00222EPSS

CVE•added 2018/06/01 5:29 p.m.•49 views

CVE-2018-11671

An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an admin account via index.php?m=admin&c=access&a=adduserhandle.

8.8CVSS8.6AI score0.00245EPSS

CVE•added 2018/06/01 5:29 p.m.•48 views

CVE-2018-11670

An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to execute arbitrary PHP code via the content parameter to index.php?m=admin&c=media&a=fileconnect.

8.8CVSS8.9AI score0.00245EPSS

CVE•added 2023/06/20 3:15 p.m.•34 views

CVE-2020-21366

Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser function of index.php.

8CVSS7.9AI score0.0006EPSS