Vulnerabilities

TI-2022-11825 CVE-2022-29307 · GHSA-cj9x-xc4v-vq59

IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the…

MEDIUM 60

IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang_model.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1828 Published 2022-05-12 No fix listed CWE-94

TI-2022-11824 CVE-2022-29306 · GHSA-8pm5-cfgj-6r8f

IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 44

IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01125 Published 2022-05-12 No fix listed CWE-89

TI-2022-09667 CVE-2022-26272 · GHSA-pxwj-hfx2-cprp

A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to…

MEDIUM 62

A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/config/config.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22471 Published 2022-03-24 No fix listed

TI-2017-03876 CVE-2017-5961 · GHSA-fx53-jf65-w7gf

An issue was discovered in ionize through 1.0.8.

LOW 29

An issue was discovered in ionize through 1.0.8.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00985 Published 2017-02-12 No fix listed CWE-79

Vulnerabilities

Filters

IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the…

IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the…

A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to…

An issue was discovered in ionize through 1.0.8.