Priority MEDIUM 48
Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00472 · Published 2025-12-22 · No fix listed CWE-89
Priority MEDIUM 45
AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0143 · Published 2022-04-12 · No fix listed CWE-89
Priority MEDIUM 45
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0143 · Published 2022-04-12 · No fix listed CWE-89
Priority MEDIUM 45
AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0143 · Published 2022-04-12 · No fix listed CWE-89
Priority MEDIUM 50
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05275 · Published 2022-04-12 · No fix listed CWE-89
Priority MEDIUM 51
AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05922 · Published 2022-04-12 · No fix listed CWE-89
Priority HIGH 74
Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.53839 · Published 2022-03-15 · No fix listed CWE-434
Priority MEDIUM 52
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07148 · Published 2022-03-15 · No fix listed CWE-89
Priority LOW 27
Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01459 · Published 2022-03-15 · No fix listed CWE-79
Priority HIGH 77
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.61965 · Published 2022-02-01 · No fix listed CWE-89
Priority LOW 37
SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02239 · Published 2014-07-10 · No fix listed CWE-89
THREATIST.IORead the docs