Vulnerabilities

TI-2019-05438 CVE-2019-7721 · GHSA-4mq3-gh8w-r3fm

lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the…

LOW 35

lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01184 Published 2019-02-11 No fix listed CWE-434

TI-2018-13373 CVE-2018-18874 · GHSA-972f-98x3-mwwp

nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the…

MEDIUM 46

nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.php?action=file_manag…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02062 Published 2018-10-31 No fix listed CWE-434

TI-2018-12979 CVE-2018-18361 · GHSA-gxf5-c9xj-qwqp

An issue was discovered in nc-cms through 2017-03-10.

LOW 29

An issue was discovered in nc-cms through 2017-03-10.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00802 Published 2018-10-15 No fix listed CWE-79

TI-2018-12924 CVE-2018-18290 · GHSA-4cgv-c33r-86xp

An issue was discovered in nc-cms through 2017-03-10.

LOW 23

An issue was discovered in nc-cms through 2017-03-10.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00621 Published 2018-10-14 No fix listed CWE-79

Vulnerabilities

Filters

lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the…

nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the…

An issue was discovered in nc-cms through 2017-03-10.

An issue was discovered in nc-cms through 2017-03-10.