Vulnerabilities

TI-2018-14611 CVE-2018-20590 · GHSA-3m68-mw3f-2vr3

Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.

LOW 23

Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00631 Published 2018-12-30 No fix listed CWE-79

TI-2018-14610 CVE-2018-20589 · GHSA-v95v-3m5h-7qcr

LOW 23

Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00637 Published 2018-12-30 No fix listed CWE-79

TI-2018-14592 CVE-2018-20569 · GHSA-wj7h-925v-6wh9

MEDIUM 45

user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01635 Published 2018-12-28 No fix listed CWE-89

TI-2018-14591 CVE-2018-20568 · GHSA-7wvh-qpj4-vr3p

MEDIUM 45

Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01635 Published 2018-12-28 No fix listed CWE-89