Overview 179 matches · 0 in Waratek scope · 0 protected · 5 exploited · 0 CISA KEV · 23 public PoC · 3 EPSS ≥ 0.5
179matches
0in Waratek scope0.0%
0protected0.0%
5exploited2.8%
0CISA KEV0.0%
23public PoC12.8%
3EPSS ≥ 0.51.7%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
39
21.8%
Not applicable
140
78.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
179
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 55 / year
20072
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20084
Not applicable4
High4
not blocked4
Working exploit published4
20090
20100
20110
20120
20130
20141
Not applicable1
High1
not blocked1
Working exploit published1
20150
20160
20170
201832
Outside Waratek scope3
Not applicable29
Critical4
High7
Medium21
not blocked32
Working exploit published1
Proof of concept only1
No public exploit30
20198
Not applicable8
Critical1
High1
Medium6
not blocked8
No public exploit8
20202
Not applicable2
Critical1
Medium1
not blocked2
Exploited1
No public exploit1
202114
Outside Waratek scope1
Not applicable13
Critical2
High4
Medium8
not blocked14
No public exploit14
202255
Outside Waratek scope24
Not applicable31
Critical41
High8
Medium6
not blocked55
Exploited4
Working exploit published8
Proof of concept only8
No public exploit35
202315
Outside Waratek scope5
Not applicable10
Critical7
High5
Medium3
not blocked15
Working exploit published2
Proof of concept only5
No public exploit8
202422
Outside Waratek scope2
Not applicable20
Critical4
High9
Medium8
Low1
not blocked22
Proof of concept only14
No public exploit8
202521
Outside Waratek scope3
Not applicable18
Critical5
Medium16
not blocked21
Proof of concept only13
No public exploit8
20263
Outside Waratek scope1
Not applicable2
Medium1
Low2
not blocked3
Proof of concept only3
2008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-29933 | Medium | 2026-03-26 | Not applicable | Proof of concept only | A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referrer value in the request header. |
| CVE-2026-2666 | Low | 2026-02-18 | Outside Waratek scope | Proof of concept only | A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used. |
| CVE-2026-1552 | Low | 2026-01-29 | Not applicable | Proof of concept only | A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_Info.php. The manipulation of the argument searchml leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2023-53975 | Critical | 2025-12-22 | Not applicable | No public exploit | Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL injection attacks. |
| CVE-2025-60837 | Medium | 2025-10-23 | Outside Waratek scope | No public exploit | A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. |
| CVE-2025-56316 | Critical | 2025-10-17 | Outside Waratek scope | No public exploit | A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering. |
| CVE-2025-60838 | Medium | 2025-10-10 | Not applicable | No public exploit | An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file. |
| CVE-2025-55797 | Medium | 2025-09-30 | Not applicable | No public exploit | An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed. |
| CVE-2025-56304 | Medium | 2025-09-23 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page. |
| CVE-2025-55835 | Critical | 2025-09-12 | Not applicable | Proof of concept only | File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering. |
| CVE-2025-56236 | Medium | 2025-08-28 | Not applicable | No public exploit | FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged user accesses the file, the script executes in their browser context. |
| CVE-2025-51660 | Medium | 2025-07-14 | Not applicable | Proof of concept only | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php. |
| CVE-2025-51659 | Medium | 2025-07-14 | Not applicable | Proof of concept only | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php. |
| CVE-2025-51658 | Medium | 2025-07-14 | Not applicable | Proof of concept only | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php. |
| CVE-2025-51657 | Medium | 2025-07-14 | Not applicable | Proof of concept only | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php. |
| CVE-2025-51656 | Medium | 2025-07-14 | Not applicable | Proof of concept only | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php. |
| CVE-2025-51655 | Medium | 2025-07-14 | Not applicable | Proof of concept only | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php. |
| CVE-2025-51654 | Medium | 2025-07-14 | Not applicable | Proof of concept only | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Infocategories.php. |
| CVE-2025-51653 | Medium | 2025-07-14 | Not applicable | Proof of concept only | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php. |
| CVE-2025-51652 | Medium | 2025-07-14 | Not applicable | Proof of concept only | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php. |
| CVE-2025-29287 | Critical | 2025-04-21 | Outside Waratek scope | Proof of concept only | An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file. |
| CVE-2025-3397 | Medium | 2025-04-08 | Not applicable | Proof of concept only | A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2025-25686 | Critical | 2025-03-27 | Not applicable | No public exploit | semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php. |
| CVE-2024-13193 | Medium | 2025-01-08 | Not applicable | Proof of concept only | A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMS_Images.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2024-53502 | Low | 2024-12-03 | Not applicable | No public exploit | Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS_SeoAndTag.php page. |
| CVE-2024-52725 | Medium | 2024-11-20 | Not applicable | No public exploit | SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMS_SeoAndTag.php component. |
| CVE-2024-46103 | Critical | 2024-09-20 | Not applicable | No public exploit | SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php. |
| CVE-2024-42991 | High | 2024-09-03 | Not applicable | Proof of concept only | MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution. |
| CVE-2024-39174 | Medium | 2024-07-05 | Not applicable | Proof of concept only | A cross-site scripting (XSS) vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article. |
| CVE-2024-36801 | Medium | 2024-06-04 | Not applicable | No public exploit | A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php. |
| CVE-2024-36800 | High | 2024-06-04 | Not applicable | Proof of concept only | A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php. |
| CVE-2024-35110 | Medium | 2024-05-17 | Not applicable | Proof of concept only | A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker. |
| CVE-2024-4595 | Medium | 2024-05-07 | Not applicable | Proof of concept only | A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263317 was assigned to this vulnerability. |
| CVE-2024-28725 | High | 2024-05-06 | Not applicable | Proof of concept only | Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings. |
| CVE-2024-32409 | High | 2024-04-19 | Not applicable | No public exploit | An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script. |
| CVE-2024-30938 | Critical | 2024-04-19 | Not applicable | Proof of concept only | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component. |
| CVE-2024-31012 | Critical | 2024-04-03 | Not applicable | Proof of concept only | An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file. |
| CVE-2024-31010 | High | 2024-04-03 | Not applicable | Proof of concept only | SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php. |
| CVE-2024-31009 | Medium | 2024-04-03 | Not applicable | Proof of concept only | SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php. |
| CVE-2024-28405 | High | 2024-03-29 | Not applicable | Proof of concept only | SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges. |
| CVE-2024-25422 | Critical | 2024-02-28 | Not applicable | No public exploit | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component. |
| CVE-2024-24291 | Medium | 2024-02-06 | Not applicable | No public exploit | An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL. |
| CVE-2024-22567 | High | 2024-02-05 | Outside Waratek scope | Proof of concept only | File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do. |
| CVE-2023-51282 | High | 2024-01-16 | Outside Waratek scope | Proof of concept only | An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter. |
| CVE-2023-52274 | Medium | 2024-01-11 | Not applicable | No public exploit | member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header. |
| CVE-2023-48864 | High | 2024-01-10 | Not applicable | Proof of concept only | SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php. |
| CVE-2023-50578 | Critical | 2023-12-30 | Outside Waratek scope | Working exploit published | Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do. |
| CVE-2023-50563 | Critical | 2023-12-14 | Not applicable | No public exploit | Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. |
| CVE-2023-48863 | High | 2023-12-04 | Not applicable | No public exploit | SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing application to inject malicious SQL commands into the background database engine for execution, and sends some attack codes as commands or query statements to the interpreter. These malicious data can deceive the interpreter, so as to execute unplanned commands or unauthorized access to data. |
| CVE-2020-23595 | High | 2023-08-11 | Not applicable | Proof of concept only | Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint. |
| CVE-2020-23564 | High | 2023-08-05 | Not applicable | Proof of concept only | File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php. |
| CVE-2023-37647 | Critical | 2023-07-31 | Not applicable | No public exploit | SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php. |
| CVE-2023-3990 | Medium | 2023-07-28 | Outside Waratek scope | Working exploit published | A vulnerability classified as problematic has been found in Mingsoft MCMS up to 5.3.1. This affects an unknown part of the file search.do of the component HTTP POST Request Handler. The manipulation of the argument style leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-235611. |
| CVE-2020-18432 | Critical | 2023-06-30 | Not applicable | No public exploit | File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges. |
| CVE-2020-20502 | Medium | 2023-06-20 | Not applicable | No public exploit | Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function. |
| CVE-2023-31707 | Critical | 2023-05-19 | Not applicable | No public exploit | SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php. |
| CVE-2020-22755 | High | 2023-05-08 | Outside Waratek scope | Proof of concept only | File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943. |
| CVE-2023-30090 | Critical | 2023-05-05 | Not applicable | No public exploit | Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file. |
| CVE-2020-20913 | Critical | 2023-04-04 | Outside Waratek scope | Proof of concept only | SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter. |
| CVE-2021-36712 | Medium | 2023-02-03 | Not applicable | No public exploit | Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function. |
| CVE-2022-47042 | High | 2023-01-26 | Outside Waratek scope | Proof of concept only | MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do. |
| CVE-2022-4640 | Medium | 2022-12-21 | Outside Waratek scope | Proof of concept only | A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499. |
| CVE-2022-4375 | Critical | 2022-12-09 | Outside Waratek scope | Working exploit published | A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.2.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-215196. |
| CVE-2022-4350 | Medium | 2022-12-08 | Outside Waratek scope | Proof of concept only | A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215112. |
| CVE-2021-38737 | Critical | 2022-10-28 | Not applicable | Proof of concept only | SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php. |
| CVE-2021-38736 | Critical | 2022-10-28 | Not applicable | Proof of concept only | SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php. |
| CVE-2021-38734 | Critical | 2022-10-28 | Not applicable | Proof of concept only | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php. |
| CVE-2021-38733 | Critical | 2022-10-28 | Not applicable | No public exploit | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php. |
| CVE-2021-38732 | Critical | 2022-10-28 | Not applicable | No public exploit | SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php. |
| CVE-2021-38731 | Critical | 2022-10-28 | Not applicable | No public exploit | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php. |
| CVE-2021-38730 | Critical | 2022-10-28 | Not applicable | Proof of concept only | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php. |
| CVE-2021-38729 | Critical | 2022-10-28 | Not applicable | Proof of concept only | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php. |
| CVE-2021-38728 | Medium | 2022-10-28 | Not applicable | No public exploit | SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php. |
| CVE-2021-38217 | Critical | 2022-10-28 | Not applicable | Proof of concept only | SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php. |
| CVE-2022-36599 | Critical | 2022-08-16 | Outside Waratek scope | No public exploit | Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists. |
| CVE-2022-36272 | Critical | 2022-08-16 | Outside Waratek scope | No public exploit | Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter. |
| CVE-2022-2726 | Critical | 2022-08-09 | Not applicable | No public exploit | A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205839. |
| CVE-2022-31943 | Critical | 2022-07-01 | Outside Waratek scope | No public exploit | MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability. |
| CVE-2022-30506 | Critical | 2022-06-02 | Outside Waratek scope | No public exploit | An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file. |
| CVE-2022-29647 | High | 2022-06-02 | Outside Waratek scope | No public exploit | An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. |
| CVE-2022-30048 | Critical | 2022-05-11 | Not applicable | No public exploit | Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter. |
| CVE-2022-30047 | Critical | 2022-05-11 | Not applicable | Exploited | Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter. |
| CVE-2022-27466 | Critical | 2022-05-02 | Not applicable | No public exploit | MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do. |
| CVE-2022-27340 | High | 2022-04-22 | Outside Waratek scope | No public exploit | MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data. |
| CVE-2022-28036 | Critical | 2022-04-12 | Not applicable | No public exploit | AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php |
| CVE-2022-28035 | Critical | 2022-04-12 | Not applicable | No public exploit | Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php |
| CVE-2022-28034 | Critical | 2022-04-12 | Not applicable | No public exploit | AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php |
| CVE-2022-28033 | Critical | 2022-04-12 | Not applicable | Working exploit published | Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php |
| CVE-2022-28032 | Critical | 2022-04-12 | Not applicable | Working exploit published | AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php |
| CVE-2022-26585 | Critical | 2022-04-05 | Outside Waratek scope | Working exploit published | Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list. |
| CVE-2022-25489 | Medium | 2022-03-15 | Not applicable | Working exploit published | Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php. |
| CVE-2022-25488 | Critical | 2022-03-15 | Not applicable | Exploited | Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php. |
| CVE-2022-25487 | Critical | 2022-03-15 | Not applicable | Exploited | Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. |
| CVE-2022-23383 | Critical | 2022-03-10 | Not applicable | No public exploit | YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non login status because real authentication is not carried out. |
| CVE-2021-46384 | Critical | 2022-03-04 | Outside Waratek scope | No public exploit | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The attack vector is: ${"freemarker.template.utility.Execute"?new()("calc")}. ¶¶ MCMS has a pre-auth RCE vulnerability through which allows unauthenticated attacker with network access via http to compromise MCMS. Successful attacks of this vulnerability can result in takeover of MCMS. |
| CVE-2022-25125 | Critical | 2022-03-03 | Not applicable | Working exploit published | MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp. |
| CVE-2022-23899 | Critical | 2022-03-03 | Outside Waratek scope | No public exploit | MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java. |
| CVE-2022-23898 | Critical | 2022-03-03 | Outside Waratek scope | Working exploit published | MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml. |
| CVE-2021-46063 | Critical | 2022-02-18 | Outside Waratek scope | No public exploit | MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module. |
| CVE-2021-46062 | High | 2022-02-18 | Outside Waratek scope | No public exploit | MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName. |