Sdcms

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Sdcms records in CISA KEV

No Sdcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sdcms 5 records MEDIUM

Records

5 records in Sdcms · all components

TI-2019-07064 CVE-2019-9651 · GHSA-w635-v6rj-h657

An issue was discovered in SDCMS V1.7.

MEDIUM 47

An issue was discovered in SDCMS V1.7.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02564 Published 2019-03-11 No fix listed CWE-94

TI-2018-13825 CVE-2018-19520 · GHSA-vrx7-96gv-r795

An issue was discovered in SDCMS 1.6 with PHP 5.x.

MEDIUM 43

An issue was discovered in SDCMS 1.6 with PHP 5.x.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02917 Published 2018-11-25 No fix listed CWE-94

TI-2019-07065 CVE-2019-9652 · GHSA-6m3m-mr6q-j9v2

There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request.

LOW 39

There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00614 Published 2019-03-11 No fix listed CWE-352

TI-2018-07800 CVE-2018-11004 · GHSA-7539-3gwr-68xv

An issue was discovered in SDcms v1.5.

LOW 39

An issue was discovered in SDcms v1.5.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0056 Published 2018-05-12 No fix listed CWE-352

TI-2018-13977 CVE-2018-19748 · GHSA-j3xq-fv5r-jfgv

app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary…

LOW 37

app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&root= directory traversal.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02024 Published 2018-11-29 No fix listed CWE-22

Open these records in search →

Critical	1
High	4
Medium	0
Low	0
No CVSS	0