Vulnerabilities

TI-2021-08832 CVE-2021-27312 · GHSA-7mxg-r76p-363g

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote…

HIGH 76

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01031 Published 2024-04-03 No fix listed CWE-918

TI-2018-11711 CVE-2018-16347 · GHSA-5qqx-32hw-5vx4

An issue was discovered in Gleez CMS v1.2.0.

LOW 29

An issue was discovered in Gleez CMS v1.2.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2018-09-02 No fix listed CWE-79

TI-2018-11292 CVE-2018-15845 · GHSA-g644-x4hj-cmhq

There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.

MEDIUM 43

There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0232 Published 2018-08-25 No fix listed CWE-352

TI-2018-05109 CVE-2018-7035 · GHSA-m2r2-qc49-gqw4

Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote…

LOW 26

Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00946 Published 2018-04-05 No fix listed CWE-79

Vulnerabilities

Filters

Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote…

An issue was discovered in Gleez CMS v1.2.0.

There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.

Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote…