Flexdotnetcms Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Flexdotnetcms Project records in CISA KEV

No Flexdotnetcms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flexdotnetcms 2 records HIGH

Records

2 records in Flexdotnetcms · all components

TI-2020-16652 CVE-2020-27386 · GHSA-j66w-g54r-w535

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated…

HIGH 76

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code (e.g., ASP code) in the for…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.71571 Published 2020-11-12 No fix listed CWE-434

TI-2020-16651 CVE-2020-27385 · GHSA-w3rf-qv39-2j3m

Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS…

LOW 39

Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenticated remote attacker to read and write to existing files outside the web root.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01766 Published 2020-11-12 No fix listed CWE-22

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0