Vulnerabilities

TI-2024-15070 CVE-2024-22569 · GHSA-3w6w-r9vq-3r79

Stored Cross-Site Scripting (XSS) vulnerability in POSCMS v4.6.2, allows attackers to…

LOW 25

Stored Cross-Site Scripting (XSS) vulnerability in POSCMS v4.6.2, allows attackers to execute arbitrary code via a crafted payload to /index.php?c=install&m=index&step=2&is_install_db=0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00469 Published 2024-01-31 No fix listed CWE-79

TI-2018-07260 CVE-2018-10236 · GHSA-5r5c-92ph-jx5r

POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the…

LOW 35

POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.php 'add' function because an attacker can control the value of $data['name'] with no restrictions, a…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01469 Published 2018-04-19 No fix listed CWE-94

TI-2018-07259 CVE-2018-10235 · GHSA-qcv3-54gc-4367

POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the…