Vulnerabilities

TI-2019-07065 CVE-2019-9652 · GHSA-6m3m-mr6q-j9v2

There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request.

LOW 39

There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00614 Published 2019-03-11 No fix listed CWE-352

TI-2019-07064 CVE-2019-9651 · GHSA-w635-v6rj-h657

An issue was discovered in SDCMS V1.7.

MEDIUM 47

An issue was discovered in SDCMS V1.7.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02564 Published 2019-03-11 No fix listed CWE-94

TI-2018-13977 CVE-2018-19748 · GHSA-j3xq-fv5r-jfgv

app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary…

LOW 37

app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&root= directory traversal.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02024 Published 2018-11-29 No fix listed CWE-22

TI-2018-13825 CVE-2018-19520 · GHSA-vrx7-96gv-r795

An issue was discovered in SDCMS 1.6 with PHP 5.x.

MEDIUM 43

An issue was discovered in SDCMS 1.6 with PHP 5.x.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02917 Published 2018-11-25 No fix listed CWE-94

TI-2018-07800 CVE-2018-11004 · GHSA-7539-3gwr-68xv

An issue was discovered in SDcms v1.5.

LOW 39

An issue was discovered in SDcms v1.5.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0056 Published 2018-05-12 No fix listed CWE-352

Vulnerabilities

Filters

There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request.

An issue was discovered in SDCMS V1.7.

app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary…

An issue was discovered in SDCMS 1.6 with PHP 5.x.

An issue was discovered in SDcms v1.5.