Pescms

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Pescms records in CISA KEV

No Pescms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pescms Team 7 records MEDIUM

Records

7 records in Pescms Team · all components

TI-2018-11731 CVE-2018-16370 · GHSA-fv96-f45h-hpj6

In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through…

MEDIUM 46

In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01798 Published 2018-09-03 No fix listed CWE-434

TI-2020-17091 CVE-2020-28092 · GHSA-4q43-hrcp-8j28

PESCMS Team 2.3.2 has multiple reflected XSS via the id…

LOW 32

PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&status=0&id=,?g=Team&m=Task&a=my&status=1&id=,?g=Team&m=Task&a=my&status=10&id=

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0269 Published 2020-11-17 No fix listed CWE-79

TI-2021-11746 CVE-2021-31679 · GHSA-r5hg-3j55-799q

An issue was discovered in PESCMS-V2.3.3.

LOW 30

An issue was discovered in PESCMS-V2.3.3.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00564 Published 2022-07-06 No fix listed CWE-352

TI-2021-11745 CVE-2021-31678 · GHSA-xp69-6p8j-w8m5

An issue was discovered in PESCMS-V2.3.3.

LOW 30

An issue was discovered in PESCMS-V2.3.3.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00556 Published 2022-07-06 No fix listed CWE-352

TI-2021-11744 CVE-2021-31677 · GHSA-hjwh-qg8v-mp9r

An issue was discovered in PESCMS-V2.3.3.

LOW 30

An issue was discovered in PESCMS-V2.3.3.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0059 Published 2022-07-06 No fix listed CWE-352

TI-2021-11743 CVE-2021-31676 · GHSA-64hj-868x-c969

A reflected XSS was discovered in PESCMS-V2.3.3.

LOW 29

A reflected XSS was discovered in PESCMS-V2.3.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00893 Published 2022-07-06 No fix listed CWE-79

TI-2018-11732 CVE-2018-16371 · GHSA-xp93-v7v5-cx68

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter…

LOW 28

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2018-09-03 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	6
Low	0
No CVSS	0