Vulnerabilities

TI-2018-11957 CVE-2018-16704 · GHSA-hh92-wg7v-8vfr

An issue was discovered in Gleez CMS v1.2.0.

LOW 21

An issue was discovered in Gleez CMS v1.2.0.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00772 Published 2018-09-07 No fix listed CWE-639

TI-2018-11956 CVE-2018-16703 · GHSA-hj39-q7cj-vfhf

A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote…

LOW 27

A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker to perform multiple user enumerations, which can further help an attacker to perform login attempts in excess of the confi…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01526 Published 2018-09-07 No fix listed CWE-307

TI-2018-16162 CVE-2018-1999021 · GHSA-q9g7-pff4-548r

Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in…

LOW 25

Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web script or HTML via the profile page editor.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00653 Published 2018-07-23 No fix listed CWE-79

TI-2018-09588 CVE-2018-13340 · GHSA-7jqh-7h8f-7555

Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.

LOW 39

Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2018-07-05 No fix listed CWE-352

Vulnerabilities

Filters

An issue was discovered in Gleez CMS v1.2.0.

A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote…

Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in…

Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.