彙總 aikcms 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
常見弱點模式包括 CSRF與SQL 注入，在 生產負載與軟體部署 使用場景中可能帶來 資料外洩 等風險。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2020-18464 | Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which can let a malicious user delete movie information. | [email protected] | 3.5 | 0.05% | 2021-08-12 | 2024-11-21 |
| CVE-2020-18463 | Cross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php, which can let a malicious user delete a video message. | [email protected] | 2.4 | 0.05% | 2021-08-12 | 2024-11-21 |
| CVE-2020-18462 | File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office does not verify the uploaded file. | [email protected] | 7.2 | 0.38% | 2021-08-12 | 2024-11-21 |
| CVE-2019-11568 | An issue was discovered in AikCms v2.0. There is a File upload vulnerability, as demonstrated by an admin/page/system/nav.php request with PHP code in a .php file with the application/octet-stream content type. | [email protected] | 8.8 | 0.40% | 2019-04-27 | 2024-11-21 |
| CVE-2019-11567 | An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $_GET['del'], as demonstrated by an admin/page/system/nav.php?del= URI. | [email protected] | 7.2 | 0.27% | 2019-04-27 | 2024-11-21 |