TI-2025-09493 CVE-2025-10353 · GHSA-chw4-gjvw-3gxc
Missing Authorization vulnerability in Melis Platform
Priority HIGH 79
File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis Platform.
Vulnerabilities
6 records
TI-2025-09492 CVE-2025-10352 · GHSA-p3vc-g9f9-mgw4
Missing Authorization vulnerability in Melis Platform
Priority HIGH 81
Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUs…
TI-2025-09491 CVE-2025-10351 · GHSA-mrmx-jfw8-qhgv
SQL injection vulnerability in Melis Platform
Priority HIGH 81
SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology.
TI-2022-18674 CVE-2022-39298 · GHSA-h479-2mv4-5c26
Deserialization of untrusted data in MelisFront
Priority MEDIUM 45
MelisFront is the engine that displays website hosted on Melis Platform.
TI-2022-18673 CVE-2022-39297 · GHSA-m3m3-6gww-7gj9
Deserialization of untrusted data in MelisCms
Priority MEDIUM 45
MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many administration tools.
TI-2022-18672 CVE-2022-39296 · GHSA-7fj2-rrq6-rphq
Path traversal in MelisAssetManager
Priority MEDIUM 47
MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder.