Vendors / Puppycms Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Puppycms records in CISA KEV No Puppycms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01519 · Published 2021-05-06 · No fix listed CWE-281
Priority LOW 34
Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00779 · Published 2021-05-06 · No fix listed CWE-862
Priority LOW 29
Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00436 · Published 2021-05-06 · No fix listed CWE-352
Priority LOW 29
An issue was discovered in puppyCMS 5.1.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0087 · Published 2018-08-25 · No fix listed CWE-79
Priority LOW 28
A vulnerability classified as problematic has been found in puppyCMS up to 5.1.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00682 · Published 2022-10-12 · No fix listed CWE-707
Open these records in search → All records by CVSS severity
1 1 3 0 0
THREATIST.IORead the docs