siberiancms siberiancms の CVE(7 件)

CVE 件数: 7 CPE versions: View versions table

概要

本ページは siberiancms siberiancms に影響する公開済み CVE(NVD の CPE 経由で関連付け)を列挙します。各行に深刻度指標・概要・公開日が含まれます。

表示中 17 / 7 CVE 件数
«« 先頭 « 前へ 1 / 1 次へ »
CVE 概要 ソース CVSS 最大値 EPSS(%) 公開 更新
CVE-2025-1105 A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. [email protected] 5.3 0.36% 2025-02-07 2026-06-17
CVE-2024-41702 SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') [email protected] 9.8 0.46% 2024-07-30 2026-06-17
CVE-2023-39378 SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user [email protected] 8.8 0.73% 2023-09-27 2026-06-17
CVE-2023-39377 SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method [email protected] 7.2 0.83% 2023-09-27 2026-06-17
CVE-2023-39376 SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network [email protected] 6.5 0.36% 2023-09-27 2026-06-17
CVE-2023-39375 SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges [email protected] 7.5 0.62% 2023-09-27 2026-06-17
CVE-2017-6906 An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data (log) passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. [email protected] 6.1 0.75% 2017-03-14 2026-06-16
«« 先頭 « 前へ 1 / 1 次へ »
cvelogic Threat Intelligence