Generic Content Management System Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Generic Content Management System Project records in CISA KEV

No Generic Content Management System Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Generic Content Management System · all components

TI-2018-14592 CVE-2018-20569 · GHSA-wj7h-925v-6wh9

MEDIUM 45

user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01635 Published 2018-12-28 No fix listed CWE-89

TI-2018-14591 CVE-2018-20568 · GHSA-7wvh-qpj4-vr3p

MEDIUM 45

Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01635 Published 2018-12-28 No fix listed CWE-89

TI-2018-14611 CVE-2018-20590 · GHSA-3m68-mw3f-2vr3

LOW 23

Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00631 Published 2018-12-30 No fix listed CWE-79

TI-2018-14610 CVE-2018-20589 · GHSA-v95v-3m5h-7qcr

LOW 23

Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00637 Published 2018-12-30 No fix listed CWE-79