Read the docs

Cms-corephp Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cms-corephp Project records in CISA KEV

No Cms-corephp Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Cms-corephp · all components

Priority HIGH 82

SQL Injection vulnerability in nitinparashar30 cms-corephp through commit bdabe52ef282846823bda102728a35506d0ec8f9 (May 19, 2021) allows unauthenticated attackers to gain escilated privledges via a crafted login.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00971 Published 2023-02-15 No fix listed CWE-89
Open these records in search →