Vulnerabilities

TI-2021-19550 CVE-2021-43736 · GHSA-gxj3-p948-cv77

CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule

MEDIUM 47

CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02483 Published 2022-03-23 No fix listed CWE-88

TI-2021-19549 CVE-2021-43735 · GHSA-7vmm-w3xx-qj2x

CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule.

MEDIUM 45

CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01259 Published 2022-03-23 No fix listed CWE-89

TI-2020-15270 CVE-2020-24993 · GHSA-hp2v-pv3m-jv9m

There is a cross site scripting vulnerability on CmsWing 1.3.7.

LOW 25

There is a cross site scripting vulnerability on CmsWing 1.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00503 Published 2021-05-17 No fix listed CWE-79

TI-2020-15269 CVE-2020-24992 · GHSA-h27r-3mr3-p6jv

There is a cross site scripting vulnerability on CmsWing 1.3.7.

LOW 25

There is a cross site scripting vulnerability on CmsWing 1.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00505 Published 2021-05-17 No fix listed CWE-79

TI-2020-13824 CVE-2020-20296 · GHSA-v28p-8jwp-98gh

An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function…

MEDIUM 45

An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01371 Published 2021-02-01 No fix listed CWE-89

TI-2020-13823 CVE-2020-20295 · GHSA-3gc8-mch5-55gq

An issue was found in CMSWing project version 1.3.8.

MEDIUM 45

An issue was found in CMSWing project version 1.3.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01371 Published 2021-02-01 No fix listed CWE-89

TI-2020-13822 CVE-2020-20294 · GHSA-r3vf-v8xh-pg2h

An issue was found in CMSWing project version 1.3.8.

MEDIUM 46

An issue was found in CMSWing project version 1.3.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0179 Published 2021-02-01 No fix listed CWE-89

TI-2019-05390 CVE-2019-7649 · GHSA-rvcf-8hgh-7wm2

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing.

LOW 35

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00891 Published 2019-02-17 No fix listed CWE-916

Vulnerabilities

Filters