Empirecms Security Vulnerabilities and Issues — Empirecms CVE List

Lucene search

PhomeEmpirecms

3 matches found

CVE•added 2018/09/02 6:29 p.m.•33 views

CVE-2018-16339

An issue was discovered in EmpireCMS 7.0. There is a CSRF vulnerability that can add administrators via upload/e/admin/user/AddUser.php?enews=AddUser.

8.8CVSS8.6AI score0.00141EPSS

CVE•added 2018/10/09 8:29 p.m.•29 views

CVE-2018-18086

EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users.

8.8CVSS8.7AI score0.00401EPSS

CVE•added 2019/03/07 11:29 p.m.•29 views

CVE-2018-18449

EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339.

8.8CVSS8.8AI score0.00141EPSS