Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority MEDIUM 40

The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2024-08-14 No fix listed CWE-552
Priority LOW 35

The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remot…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00721 Published 2024-08-14 No fix listed CWE-78