Vendors / Dhcms Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Dhcms Project records in CISA KEV No Dhcms Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01076 · Published 2022-04-26 · No fix listed CWE-22
Priority LOW 29
A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious user execute arbitrary code.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00852 · Published 2021-05-12 · No fix listed CWE-79
Priority LOW 26
An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes an error that will leak the physical path.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01179 · Published 2021-05-12 · No fix listed CWE-209
Priority LOW 23
DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.
CVSS 3.0 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0064 · Published 2019-03-03 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 3 0 0
THREATIST.IORead the docs