Read the docs

Greencms

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Greencms records in CISA KEV

No Greencms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Greencms 3 records LOW

Records

5 records

TI-2019-15627 CVE-2019-25574 · GHSA-23hm-6gvp-w3w5

Green CMS 2.x Path Traversal Arbitrary File Download

Priority MEDIUM 64

Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01145 Published 2026-03-21 No fix listed CWE-22
TI-2019-15626 CVE-2019-25573 · GHSA-8p2h-64fj-mxhv

Green CMS 2.x SQL Injection via cat Parameter

Priority MEDIUM 64

Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00356 Published 2026-03-21 No fix listed CWE-89
TI-2018-13695 CVE-2018-19329 · GHSA-qqrw-854q-c9ww

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files…

Priority LOW 26

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01774 Published 2018-11-17 No fix listed CWE-22
Open these records in search →