Vulnerabilities

TI-2020-14017 CVE-2020-21236 · GHSA-33mw-354r-24rw

A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows…

LOW 39

A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00554 Published 2021-12-27 No fix listed CWE-352

TI-2020-13400 CVE-2020-18458 · GHSA-g42v-rgp3-94q5

Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an…

LOW 35

Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00458 Published 2021-08-12 No fix listed CWE-352

TI-2020-13395 CVE-2020-18451 · GHSA-4qjg-hprf-3gqx

Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter…

LOW 23

Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00527 Published 2021-08-12 No fix listed CWE-79

TI-2018-10660 CVE-2018-14831 · GHSA-8hjh-c42v-q326

An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated…

LOW 26

An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI.

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01562 Published 2019-07-10 No fix listed CWE-200

TI-2018-14594 CVE-2018-20571 · GHSA-5429-w5jc-q743

DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted…

LOW 36

DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.\Public\Config\config.ini.php to read the global configuration file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01368 Published 2018-12-28 No fix listed CWE-200

TI-2018-11697 CVE-2018-16331 · GHSA-ch57-5x8m-hfx2

admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password.

LOW 39

admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2018-09-02 No fix listed CWE-352

TI-2018-11629 CVE-2018-16239 · GHSA-wx8f-mrrp-3fv2

An issue was discovered in damiCMS V6.0.1.

MEDIUM 45

An issue was discovered in damiCMS V6.0.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01228 Published 2018-08-30 No fix listed CWE-330

TI-2018-11628 CVE-2018-16238 · GHSA-8v4v-wpqg-cgmx

An issue was discovered in damiCMS V6.0.1.

LOW 36

An issue was discovered in damiCMS V6.0.1.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02155 Published 2018-08-30 No fix listed CWE-20

TI-2018-11627 CVE-2018-16237 · GHSA-w633-7vm3-q65x

An issue was discovered in damiCMS V6.0.1.

LOW 16

An issue was discovered in damiCMS V6.0.1.

CVSS 3.0LOW 2.7 Network High privileges No interaction EPSS 0.01184 Published 2018-08-30 No fix listed CWE-22

TI-2018-11291 CVE-2018-15844 · GHSA-86mg-57gh-5q24

An issue was discovered in DamiCMS 6.0.0.

MEDIUM 43

An issue was discovered in DamiCMS 6.0.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02436 Published 2018-08-25 No fix listed CWE-352

TI-2018-09351 CVE-2018-13031 · GHSA-pf9g-f99h-4mm4

DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.

MEDIUM 40

DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0108 Published 2018-07-05 No fix listed CWE-352

Vulnerabilities

Filters