Vulnerabilities

TI-2021-08854 CVE-2021-27352 · GHSA-vhph-xpg2-fjgw

An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect…

LOW 26

An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00832 Published 2021-03-29 No fix listed CWE-601

TI-2019-14742 CVE-2019-20522 · GHSA-9hxh-hv5g-g689

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.

LOW 28

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2020-03-19 No fix listed CWE-79

TI-2019-14743 CVE-2019-20523 · GHSA-f5gw-w8h7-m996

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.

LOW 28

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.007 Published 2020-03-19 No fix listed CWE-79

TI-2019-14744 CVE-2019-20524 · GHSA-2qrv-v95f-h2jw

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.

LOW 28

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.007 Published 2020-03-19 No fix listed CWE-79

TI-2019-12716 CVE-2019-17046 · GHSA-pc49-5vr3-224m

Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on…

LOW 39

Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0442 Published 2019-09-30 No fix listed CWE-434

TI-2019-12715 CVE-2019-17045 · GHSA-hcp4-p73v-jmxh

Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.

LOW 23

Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00677 Published 2019-09-30 No fix listed CWE-79

TI-2015-01870 CVE-2015-2083 · GHSA-wgg5-2jcf-8h35

Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to…

LOW 31

Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authentication of administrators for requests that add a value to a profile field via a profilefields request to admin.php…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00641 Published 2015-02-25 No fix listed CWE-352

TI-2014-01517 CVE-2014-1944 · GHSA-p3m3-mm8m-9fq2

Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote…

LOW 26

Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the text parameter to index.php/guestbook/index/newentry.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03283 Published 2014-03-07 No fix listed CWE-79

Vulnerabilities

Filters