Bycms Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Bycms Project records in CISA KEV

No Bycms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Bycms · all components

TI-2020-13399 CVE-2020-18457 · GHSA-p84x-27g5-qwqr

LOW 31

Cross Site Request Forgery (CSRF) vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00481 Published 2021-08-12 No fix listed CWE-352

TI-2020-13396 CVE-2020-18454 · GHSA-wqj4-8cqr-626f

LOW 31

Cross Site Request Forgery (CSRF) vulnerability in bycms v1.3 via admin.php/systems/index/module_id/70/group_id/1.html.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00481 Published 2021-08-12 No fix listed CWE-352

TI-2020-13397 CVE-2020-18455 · GHSA-x4jc-6f98-5grf

LOW 23

Cross Site Scripting (XSS) vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00527 Published 2021-08-12 No fix listed CWE-79