Ed01-cms Project

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ed01-cms Project records in CISA KEV

No Ed01-cms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Ed01-cms · all components

TI-2020-13356 CVE-2020-18261 · GHSA-7765-vqcc-6v95

MEDIUM 45

An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01372 Published 2021-11-03 No fix listed CWE-434

TI-2022-11214 CVE-2022-28524 · GHSA-m8fx-236h-qcjm

MEDIUM 44

ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00936 Published 2022-04-26 No fix listed CWE-89

TI-2020-13357 CVE-2020-18262 · GHSA-3698-xpjv-mhxj

MEDIUM 44

ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00988 Published 2021-11-03 No fix listed CWE-89

TI-2022-11215 CVE-2022-28525 · GHSA-v4m4-xjj4-28x3

MEDIUM 40

ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edit_user&id=1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01013 Published 2022-04-26 No fix listed CWE-434

TI-2020-13355 CVE-2020-18259 · GHSA-cc75-w3jh-52vx

LOW 28

ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2021-11-03 No fix listed CWE-79

TI-2024-20385 CVE-2024-30890 · GHSA-rh2q-xgw7-5r5r

LOW 22

Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categories.php component.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00447 Published 2024-04-25 No fix listed CWE-79