Vulnerabilities

TI-2022-11216 CVE-2022-28527 · GHSA-67w6-36rp-6g7c

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via…

LOW 37

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01076 Published 2022-04-26 No fix listed CWE-22

TI-2020-13575 CVE-2020-19275 · GHSA-pchj-m6qq-j4q5

An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid…

LOW 26

An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes an error that will leak the physical path.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01179 Published 2021-05-12 No fix listed CWE-209

TI-2020-13574 CVE-2020-19274 · GHSA-2x47-7chp-vgf9

A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via…

LOW 29

A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious user execute arbitrary code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2021-05-12 No fix listed CWE-79

TI-2019-06975 CVE-2019-9550 · GHSA-gg6q-gwcv-5mmf

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.

LOW 23

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0064 Published 2019-03-03 No fix listed CWE-79

Vulnerabilities

Filters

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via…

An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid…

A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via…

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.