Vulnerabilities

TI-2019-12175 CVE-2019-16192 · GHSA-4rqp-cqfj-7r6v

upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow…

MEDIUM 46

upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0208 Published 2019-09-09 No fix listed CWE-434

TI-2018-13342 CVE-2018-18835 · GHSA-2xg4-3vp8-p43f

upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to…

MEDIUM 45

upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01577 Published 2018-10-30 No fix listed CWE-94

TI-2017-02394 CVE-2017-3189 · GHSA-9mqm-jfh7-77gm

Unrestricted file upload in docCMS Administration Panel

MEDIUM 45

The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to arbitrary file upload.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.06464 Published 2018-07-24 No fix listed CWE-434

TI-2017-02393 CVE-2017-3188 · GHSA-mvh7-9whc-7fpw

Path traversal in docCMS Administration Panel

LOW 34

The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversal.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02753 Published 2018-07-24 No fix listed CWE-22

TI-2017-02392 CVE-2017-3187 · GHSA-wcqw-wpq6-v3g4

Cross-site request forgery in docCMS Administration Panel

MEDIUM 40

The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgery.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01124 Published 2018-07-24 No fix listed CWE-352