Vendors / Greencms Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Greencms records in CISA KEV No Greencms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a=downfile URI.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01561 · Published 2018-06-29 · No fix listed CWE-20
Priority LOW 29
An issue was discovered in GreenCMS v2.3.0603.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00506 · Published 2018-11-20 · No fix listed CWE-352
Priority LOW 26
GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile…
CVSS 3.0 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01774 · Published 2018-11-17 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
0 3 2 0 0
