Vulnerabilities

TI-2020-14061 CVE-2020-21482 · GHSA-g9xx-m8f7-gx2c

A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the…

LOW 25

A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the administrator's cookie via a crafted payload in the Name field under the Message Board module

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00581 Published 2021-09-15 No fix listed CWE-79

TI-2020-14060 CVE-2020-21481 · GHSA-px8j-vfm9-79mv

An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute…

LOW 35

An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01651 Published 2021-09-15 No fix listed CWE-434

TI-2020-14059 CVE-2020-21480 · GHSA-p8f4-g4x9-fc9w

An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file.

LOW 35

An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01686 Published 2021-09-15 No fix listed

Vulnerabilities

Filters

A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the…

An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute…

An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file.