Skip to content
Noroxi

clippercms records

10 published records for vendor clippercms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2022-41495
    39Monitor

    ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    clippercms · clippercmsOct 13, 2022

  • CVE-2022-41497
    39Monitor

    ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    clippercms · clippercmsOct 13, 2022

  • CVE-2018-19135
    36Monitor

    ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default).

    HighCVSS 8.8Proof of conceptEPSS 3%

    clippercms · clippercmsNov 11, 2018

  • CVE-2018-11571
    35Monitor

    ClipperCMS 1.3.3 allows Session Fixation.

    HighCVSS 8.8No exploitEPSS 1%

    clippercms · clippercmsMay 30, 2018

  • CVE-2018-19424
    29Monitor

    ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files.

    HighCVSS 7.2No exploitEPSS 2%

    clippercms · clippercmsNov 21, 2018

  • CVE-2018-12101
    21Monitor

    CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields.

    MediumCVSS 5.4No exploitEPSS 1%

    clippercms · clippercmsAug 15, 2019

  • CVE-2018-11572
    21Monitor

    ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -> Manage modules -> edit" action to the manager/ URI.

    MediumCVSS 5.4No exploitEPSS 1%

    clippercms · clippercmsMay 30, 2018

  • CVE-2018-11332
    20Monitor

    Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 al

    MediumCVSS 4.8Proof of conceptEPSS 2%

    clippercms · clippercmsMay 24, 2018

  • CVE-2018-13998
    19Monitor

    ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.

    MediumCVSS 4.8No exploitEPSS 1%

    clippercms · clippercmsJul 12, 2018

  • CVE-2018-13106
    19Monitor

    ClipperCMS 1.3.3 has stored XSS via the "Tools -> Configuration" screen of the manager/ URI.

    MediumCVSS 4.8No exploitEPSS 1%

    clippercms · clippercmsJul 3, 2018