Vulnerabilities

TI-2020-13404 CVE-2020-18464 · GHSA-hgh6-wrpf-vxf6

Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which…

LOW 17

Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which can let a malicious user delete movie information.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00288 Published 2021-08-12 No fix listed CWE-352

TI-2020-13403 CVE-2020-18463 · GHSA-f85g-5x38-2g3r

LOW 12

Cross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php, which can let a malicious user delete a video message.

CVSS 3.1LOW 2.4 Network High privileges User interaction EPSS 0.00291 Published 2021-08-12 No fix listed CWE-352

TI-2020-13402 CVE-2020-18462 · GHSA-5597-jqgc-w54q

LOW 34

File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office does not verify the uploaded file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00976 Published 2021-08-12 No fix listed CWE-434

TI-2019-08646 CVE-2019-11568 · GHSA-m59c-69j5-jpq3

MEDIUM 41

An issue was discovered in AikCms v2.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0139 Published 2019-04-27 No fix listed CWE-434

TI-2019-08645 CVE-2019-11567 · GHSA-f377-74h5-fxgr

LOW 34

An issue was discovered in AikCms v2.0.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01252 Published 2019-04-27 No fix listed CWE-89