Vulnerabilities

TI-2020-11961 CVE-2020-15189

Remote Code Execution in SOY CMS

LOW 37

SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02807 Published 2020-09-18 Fixed in 3.0.2.328 CWE-434

TI-2020-11960 CVE-2020-15188

MEDIUM 51

SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.05083 Published 2020-09-18 Fixed in 3.0.2.328 CWE-502

TI-2019-08498 CVE-2019-11376 · GHSA-gvjh-v5q9-73c3

LOW 38

SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02226 Published 2019-04-20 No fix listed CWE-94