Dscms Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Dscms Project records in CISA KEV

No Dscms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Dscms · all components

TI-2022-10919 CVE-2022-28114 · GHSA-c3m8-fwvv-cqq8

MEDIUM 41

DSCMS v3.0 was discovered to contain an arbitrary file deletion vulnerability via /controller/Adv.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01071 Published 2022-04-28 No fix listed

TI-2018-12937 CVE-2018-18317 · GHSA-ww4g-p2wc-5j84

LOW 39

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00494 Published 2018-10-15 No fix listed CWE-352