Vulnerabilities

TI-2018-13728 CVE-2018-19376 · GHSA-8g8c-wq9r-89rm

An issue was discovered in GreenCMS v2.3.0603.

LOW 29

An issue was discovered in GreenCMS v2.3.0603.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00506 Published 2018-11-20 No fix listed CWE-352

TI-2018-13695 CVE-2018-19329 · GHSA-qqrw-854q-c9ww

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files…

LOW 26

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01774 Published 2018-11-17 No fix listed CWE-22

TI-2018-09319 CVE-2018-12988 · GHSA-242h-9g3g-w3fx

GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a=downfile URI.

LOW 36

GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a=downfile URI.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01561 Published 2018-06-29 No fix listed CWE-20

Vulnerabilities

Filters

An issue was discovered in GreenCMS v2.3.0603.

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files…

GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a=downfile URI.