Overview 179 matches · 0 in Waratek scope · 0 protected · 5 exploited · 0 CISA KEV · 23 public PoC · 3 EPSS ≥ 0.5
179matches
0in Waratek scope0.0%
0protected0.0%
5exploited2.8%
0CISA KEV0.0%
23public PoC12.8%
3EPSS ≥ 0.51.7%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
39
21.8%
Not applicable
140
78.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
179
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 55 / year
20072
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20084
Not applicable4
High4
not blocked4
Working exploit published4
20090
20100
20110
20120
20130
20141
Not applicable1
High1
not blocked1
Working exploit published1
20150
20160
20170
201832
Outside Waratek scope3
Not applicable29
Critical4
High7
Medium21
not blocked32
Working exploit published1
Proof of concept only1
No public exploit30
20198
Not applicable8
Critical1
High1
Medium6
not blocked8
No public exploit8
20202
Not applicable2
Critical1
Medium1
not blocked2
Exploited1
No public exploit1
202114
Outside Waratek scope1
Not applicable13
Critical2
High4
Medium8
not blocked14
No public exploit14
202255
Outside Waratek scope24
Not applicable31
Critical41
High8
Medium6
not blocked55
Exploited4
Working exploit published8
Proof of concept only8
No public exploit35
202315
Outside Waratek scope5
Not applicable10
Critical7
High5
Medium3
not blocked15
Working exploit published2
Proof of concept only5
No public exploit8
202422
Outside Waratek scope2
Not applicable20
Critical4
High9
Medium8
Low1
not blocked22
Proof of concept only14
No public exploit8
202521
Outside Waratek scope3
Not applicable18
Critical5
Medium16
not blocked21
Proof of concept only13
No public exploit8
20263
Outside Waratek scope1
Not applicable2
Medium1
Low2
not blocked3
Proof of concept only3
2008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2021-46037 | High | 2022-02-18 | Outside Waratek scope | No public exploit | MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do. |
| CVE-2021-46036 | Critical | 2022-02-18 | Outside Waratek scope | No public exploit | An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code. |
| CVE-2021-44868 | Critical | 2022-02-17 | Outside Waratek scope | Exploited | A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do |
| CVE-2022-23384 | High | 2022-02-15 | Not applicable | No public exploit | YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add |
| CVE-2022-24223 | Critical | 2022-02-01 | Not applicable | Working exploit published | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. |
| CVE-2022-23889 | Medium | 2022-01-28 | Not applicable | No public exploit | The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments. |
| CVE-2022-23888 | High | 2022-01-28 | Not applicable | No public exploit | YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html. |
| CVE-2022-23887 | Medium | 2022-01-28 | Not applicable | No public exploit | YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete. |
| CVE-2021-46386 | Critical | 2022-01-26 | Outside Waratek scope | No public exploit | File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload. |
| CVE-2021-46385 | High | 2022-01-26 | Outside Waratek scope | No public exploit | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.FormDataAction#queryData. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database. |
| CVE-2021-46383 | High | 2022-01-26 | Outside Waratek scope | No public exploit | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.web.DictAction#list. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database. |
| CVE-2022-23315 | Critical | 2022-01-21 | Outside Waratek scope | No public exploit | MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do. |
| CVE-2022-23314 | Critical | 2022-01-21 | Not applicable | No public exploit | MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do. |
| CVE-2022-22930 | Critical | 2022-01-21 | Outside Waratek scope | No public exploit | A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload. |
| CVE-2022-22929 | Critical | 2022-01-21 | Outside Waratek scope | No public exploit | MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file. |
| CVE-2022-22928 | Critical | 2022-01-21 | Not applicable | No public exploit | MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code. |
| CVE-2020-18081 | High | 2021-12-17 | Not applicable | No public exploit | The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query. |
| CVE-2020-18078 | Critical | 2021-12-17 | Not applicable | No public exploit | A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password. |
| CVE-2020-19951 | High | 2021-09-23 | Not applicable | No public exploit | A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application. |
| CVE-2020-19950 | Medium | 2021-09-23 | Not applicable | No public exploit | A cross-site scripting (XSS) vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML. |
| CVE-2020-19949 | Medium | 2021-09-23 | Not applicable | No public exploit | A cross-site scripting (XSS) vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML. |
| CVE-2020-20341 | High | 2021-09-01 | Not applicable | No public exploit | YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function. |
| CVE-2020-19118 | Medium | 2021-07-30 | Not applicable | No public exploit | Cross Site Scripting (XSS) vulnerabiity in YzmCMS 5.2 via the site_code parameter in admin/index/init.html. |
| CVE-2020-35972 | Medium | 2021-06-03 | Not applicable | No public exploit | An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html. |
| CVE-2020-35971 | Medium | 2021-06-03 | Not applicable | No public exploit | A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user_config_edit.html page. |
| CVE-2020-35970 | High | 2021-06-03 | Not applicable | No public exploit | An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read. |
| CVE-2020-23370 | Medium | 2021-05-10 | Not applicable | No public exploit | In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML. |
| CVE-2020-23369 | Medium | 2021-05-10 | Not applicable | No public exploit | In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3. |
| CVE-2020-18084 | Medium | 2021-04-30 | Not applicable | No public exploit | Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in. |
| CVE-2020-23262 | Critical | 2021-01-26 | Outside Waratek scope | No public exploit | An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do. |
| CVE-2020-29597 | Critical | 2020-12-07 | Not applicable | Exploited | IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows unauthenticated attackers to upload files into the server. |
| CVE-2020-22394 | Medium | 2020-11-19 | Not applicable | No public exploit | In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability. |
| CVE-2019-16532 | Medium | 2019-09-26 | Not applicable | No public exploit | An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections. |
| CVE-2019-16678 | Medium | 2019-09-21 | Not applicable | No public exploit | admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route. |
| CVE-2019-1010151 | Critical | 2019-07-19 | Not applicable | No public exploit | zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php. |
| CVE-2018-16247 | Medium | 2019-06-20 | Not applicable | No public exploit | YzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter. |
| CVE-2019-11518 | High | 2019-04-25 | Not applicable | No public exploit | An issue was discovered in SEMCMS 3.8. SEMCMS_Inquiry.php allows AID[] SQL Injection because the class.phpmailer.php inject_check_sql protection mechanism is incomplete. |
| CVE-2019-9661 | Medium | 2019-03-11 | Not applicable | No public exploit | Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter, |
| CVE-2019-9660 | Medium | 2019-03-11 | Not applicable | No public exploit | Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter. |
| CVE-2019-9570 | Medium | 2019-03-05 | Not applicable | No public exploit | An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/system_manage/save.html URI, related to the site_code parameter. |
| CVE-2018-20017 | Medium | 2018-12-10 | Not applicable | No public exploit | SEMCMS 3.5 has XSS via the first text box to the SEMCMS_Main.php URI. |
| CVE-2018-20015 | High | 2018-12-10 | Not applicable | No public exploit | YzmCMS v5.2 has admin/role/add.html CSRF. |
| CVE-2018-19849 | Medium | 2018-12-04 | Not applicable | No public exploit | An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter. |
| CVE-2018-19092 | Medium | 2018-11-07 | Not applicable | No public exploit | An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user's cookie. |
| CVE-2018-18841 | Medium | 2018-10-30 | Not applicable | No public exploit | XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexkey parameter. |
| CVE-2018-18840 | Medium | 2018-10-30 | Not applicable | No public exploit | XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexmetatit parameter. |
| CVE-2018-18831 | High | 2018-10-30 | Outside Waratek scope | No public exploit | An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter. |
| CVE-2018-18830 | Critical | 2018-10-30 | Outside Waratek scope | No public exploit | An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code with a .png filename, and then intercept the data packet. In the name parameter, change the suffix to jsp. In the response, the server returns the storage path of the file, which can be accessed to execute arbitrary JSP code. |
| CVE-2018-18783 | Medium | 2018-10-29 | Not applicable | No public exploit | XSS was discovered in SEMCMS V3.4 via the semcms_remail.php?type=ok umail parameter. |
| CVE-2018-18745 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing. |
| CVE-2018-18744 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI. |
| CVE-2018-18743 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI. |
| CVE-2018-18742 | High | 2018-10-29 | Not applicable | No public exploit | A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI. |
| CVE-2018-18741 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing. |
| CVE-2018-18740 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php?lgid=1 URI. |
| CVE-2018-18739 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field. |
| CVE-2018-18738 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1 category_key parameter. |
| CVE-2018-17366 | High | 2018-09-23 | Outside Waratek scope | No public exploit | An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. |
| CVE-2018-17044 | Medium | 2018-09-14 | Not applicable | No public exploit | In YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter. |
| CVE-2018-16346 | Medium | 2018-09-02 | Not applicable | No public exploit | ChemCMS 1.0.6 has XSS via the "setting -> website information" field. |
| CVE-2018-14579 | Critical | 2018-07-24 | Not applicable | No public exploit | GolemCMS through 2008-12-24, if the install/ directory remains active after an installation, allows remote attackers to execute arbitrary PHP code by inserting this code into the "Database Information" "Table prefix" form field, or obtain sensitive information via a direct request for install/install.sql. |
| CVE-2018-12630 | Critical | 2018-06-21 | Not applicable | No public exploit | NEWMARK (aka New Mark) NMCMS 2.1 allows SQL Injection via the sect_id parameter to the /catalog URI. |
| CVE-2018-11554 | Critical | 2018-06-05 | Not applicable | No public exploit | The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier for remote attackers to hijack accounts via a brute-force approach. |
| CVE-2018-10295 | High | 2018-04-22 | Not applicable | No public exploit | ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account. |
| CVE-2018-10224 | Medium | 2018-04-19 | Not applicable | No public exploit | An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html. |
| CVE-2018-10223 | Medium | 2018-04-19 | Not applicable | No public exploit | An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/admin_manage/add.html. |
| CVE-2018-10026 | Medium | 2018-04-11 | Not applicable | No public exploit | The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php. |
| CVE-2018-8756 | High | 2018-03-18 | Not applicable | No public exploit | Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST data of an index.php?m=member&c=member_content&a=init request. |
| CVE-2018-8078 | Medium | 2018-03-13 | Not applicable | Proof of concept only | YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html. |
| CVE-2018-7653 | Medium | 2018-03-04 | Not applicable | Working exploit published | In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter. |
| CVE-2018-7579 | High | 2018-03-01 | Not applicable | No public exploit | \application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/update_category_url.html. |
| CVE-2018-7479 | Medium | 2018-02-26 | Not applicable | No public exploit | YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php. |
| CVE-2014-4852 | High | 2014-07-10 | Not applicable | Working exploit published | SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the id parameter. |
| CVE-2008-5708 | High | 2008-12-24 | Not applicable | Working exploit published | redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1. |
| CVE-2008-5491 | High | 2008-12-12 | Not applicable | Working exploit published | SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter. |
| CVE-2008-3721 | High | 2008-08-20 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the language_dir parameter. |
| CVE-2008-3720 | High | 2008-08-20 | Not applicable | Working exploit published | SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the id vector is already covered by CVE-2007-5679. |
| CVE-2007-5679 | High | 2007-10-25 | Not applicable | Working exploit published | SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page (build_media_content.php). NOTE: it was later reported that 0.7.4 is also affected. |
| CVE-2007-2214 | High | 2007-04-24 | Not applicable | No public exploit | Unrestricted file upload vulnerability in includes/upload_file.php in DmCMS allows remote attackers to upload arbitrary PHP scripts by placing a script's contents in both the File2 and File3 parameters, and sending a ok.php?do=act Referer. |