Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Greencms Clear all filters
TI-2019-15627 CVE-2019-25574 · GHSA-23hm-6gvp-w3w5

Green CMS 2.x Path Traversal Arbitrary File Download

Priority MEDIUM 64

Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.01145 Published 2026-03-21 No fix listed CWE-22
TI-2019-15626 CVE-2019-25573 · GHSA-8p2h-64fj-mxhv

Green CMS 2.x SQL Injection via cat Parameter

Priority MEDIUM 64

Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00356 Published 2026-03-21 No fix listed CWE-89
TI-2018-13695 CVE-2018-19329 · GHSA-qqrw-854q-c9ww

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files…

Priority LOW 26

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01774 Published 2018-11-17 No fix listed CWE-22