Vendors / Articlecms Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now Articlecms Project records in CISA KEV No Articlecms Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01292 · Published 2021-05-13 · No fix listed CWE-434
Priority MEDIUM 45
File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after the JPEG data, which could let a remote malicious user execu…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01292 · Published 2021-05-13 · No fix listed CWE-434
Priority LOW 28
ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00643 · Published 2018-11-23 · No fix listed CWE-79
Priority LOW 25
ArticleCMS through 2017-02-19 has XSS via an "add an article" action.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00476 · Published 2018-06-13 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 0 2 0 0
THREATIST.IORead the docs