TI-2024-30893 CVE-2024-46101 · GHSA-h9ph-w4hg-9mjw
GDidees CMS <= v3.9.1 has a file upload vulnerability.
Priority HIGH 82
GDidees CMS <= v3.9.1 has a file upload vulnerability.
Gdidees
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Gdidees records in CISA KEVNo Gdidees vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2023-11960 CVE-2023-27179 · GHSA-xx9q-x7hp-rwhj
GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download…
Priority HIGH 73
GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php.
TI-2023-11961 CVE-2023-27180 · GHSA-v46r-626m-f3pp
GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by…
Priority HIGH 72
GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/backup.php.
TI-2023-23989 CVE-2023-44758 · GHSA-hpqh-jxqm-vm9x
GDidees CMS 3.0 is affected by a Cross-Site Scripting (XSS) vulnerability that allows…
Priority MEDIUM 58
GDidees CMS 3.0 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Page Title.
TI-2023-11959 CVE-2023-27178 · GHSA-2p4x-63mg-m275
An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows…
Priority MEDIUM 52
An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted file.