Vendors / Xecms Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Xecms Project records in CISA KEV No Xecms Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_username cookie.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.1203 · Published 2009-04-10 · No fix listed CWE-287
Open these records in search → All records by CVSS severity
Critical0 High1 Medium0 Low0 No CVSS0