Vulnerabilities

TI-2023-18811 CVE-2023-37164 · GHSA-q7x6-ffhm-2jf6

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id…

MEDIUM 60

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id parameter at /shop/?module=shop&action=search.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0057 Published 2023-07-20 No fix listed CWE-79

TI-2011-04590 CVE-2011-5318 · GHSA-7wgh-f3wv-prq6

Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles via a save_post action to ad…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0106 Published 2015-01-01 No fix listed CWE-352

Vulnerabilities

Filters

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id…

Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow…