TI-2021-20502 CVE-2021-45380 · GHSA-qx8q-6v87-v7f8
AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php
Priority LOW 32
AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php
Appcms
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Appcms records in CISA KEVNo Appcms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2020-18416 CVE-2020-36006 · GHSA-4xj3-65qx-27hc
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which…
Priority LOW 31
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.
TI-2020-18415 CVE-2020-36005 · GHSA-m5c3-cjw4-wqcf
AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which…
Priority LOW 31
AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.
TI-2020-18414 CVE-2020-36004 · GHSA-c5g4-f3c5-3jpf
AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which…
Priority LOW 31
AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information.
TI-2020-18417 CVE-2020-36007 · GHSA-23f3-vhq3-gx53
AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack…
Priority LOW 29
AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users.
TI-2019-07013 CVE-2019-9595 · GHSA-8gch-c97r-j7f5
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.
Priority LOW 29
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.