Vulnerabilities

TI-2022-13857 CVE-2022-32101 · GHSA-54m8-pj68-6r3r

kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid…

MEDIUM 44

kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-06-15 No fix listed CWE-89

TI-2019-12622 CVE-2019-16923 · GHSA-957g-wvq4-j3mj

LOW 29

kkcms 1.3 has jx.php?url= XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00818 Published 2019-09-27 No fix listed CWE-79

TI-2019-12498 CVE-2019-16706 · GHSA-8wwh-xjfh-jjj2

LOW 39

kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00603 Published 2019-09-23 No fix listed CWE-352