Aikcms

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Aikcms records in CISA KEV

No Aikcms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2019-08646 CVE-2019-11568 · GHSA-m59c-69j5-jpq3

MEDIUM 41

An issue was discovered in AikCms v2.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0139 Published 2019-04-27 No fix listed CWE-434

TI-2020-13402 CVE-2020-18462 · GHSA-5597-jqgc-w54q

LOW 34

File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office does not verify the uploaded file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00976 Published 2021-08-12 No fix listed CWE-434

TI-2019-08645 CVE-2019-11567 · GHSA-f377-74h5-fxgr

LOW 34

An issue was discovered in AikCms v2.0.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01252 Published 2019-04-27 No fix listed CWE-89

TI-2020-13404 CVE-2020-18464 · GHSA-hgh6-wrpf-vxf6

LOW 17

Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which can let a malicious user delete movie information.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00288 Published 2021-08-12 No fix listed CWE-352

TI-2020-13403 CVE-2020-18463 · GHSA-f85g-5x38-2g3r

LOW 12

Cross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php, which can let a malicious user delete a video message.

CVSS 3.1LOW 2.4 Network High privileges User interaction EPSS 0.00291 Published 2021-08-12 No fix listed CWE-352