damicms records
11 published records for vendor damicms.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)5
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-330 Use of Insufficiently Random Values1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2018-16239No exploit | An issue was discovered in damiCMS V6.0.1.damicms · damicms · CWE-330 | Critical9.8 | — | 1.2% | Aug 30, 2018 |
36Monitor | CVE-2018-15844Proof of concept | An issue was discovered in DamiCMS 6.0.0.damicms · damicms · CWE-352 | High8.8 | — | 2.5% | Aug 25, 2018 |
35Monitor | CVE-2018-13031No exploit | DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.damicms · damicms · CWE-352 | High8.8 | — | 1.1% | Jul 5, 2018 |
35Monitor | CVE-2020-21236No exploit | A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts damicms · damicms · CWE-352 | High8.8 | — | 0.5% | Dec 27, 2021 |
35Monitor | CVE-2018-16331No exploit | admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password.damicms · damicms · CWE-352 | High8.8 | — | 0.5% | Sep 1, 2018 |
32Monitor | CVE-2020-18458No exploit | Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.damicms · damicms · CWE-352 | High8.0 | — | 0.5% | Aug 12, 2021 |
30Monitor | CVE-2018-20571No exploit | DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tdamicms · damicms · CWE-200 | High7.5 | — | 1.4% | Dec 28, 2018 |
29Monitor | CVE-2018-16238No exploit | An issue was discovered in damiCMS V6.0.1.damicms · damicms · CWE-20 | High7.2 | — | 2.2% | Aug 30, 2018 |
19Monitor | CVE-2018-14831No exploit | An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafdamicms · damicms · CWE-200 | Medium4.9 | — | 1.6% | Jul 10, 2019 |
19Monitor | CVE-2020-18451No exploit | Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.damicms · damicms · CWE-79 | Medium4.8 | — | 0.5% | Aug 12, 2021 |
10Monitor | CVE-2018-16237No exploit | An issue was discovered in damiCMS V6.0.1.damicms · damicms · CWE-22 | Low2.7 | — | 1.2% | Aug 30, 2018 |
- CVE-2018-1623939Monitor
An issue was discovered in damiCMS V6.0.1.
CriticalCVSS 9.8No exploitEPSS 1%damicms · damicmsAug 30, 2018
- CVE-2018-1584436Monitor
An issue was discovered in DamiCMS 6.0.0.
HighCVSS 8.8Proof of conceptEPSS 2%damicms · damicmsAug 25, 2018
- CVE-2018-1303135Monitor
DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.
HighCVSS 8.8No exploitEPSS 1%damicms · damicmsJul 5, 2018
- CVE-2020-2123635Monitor
A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts
HighCVSS 8.8No exploitEPSS 1%damicms · damicmsDec 27, 2021
- CVE-2018-1633135Monitor
admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password.
HighCVSS 8.8No exploitEPSS 1%damicms · damicmsSep 1, 2018
- CVE-2020-1845832Monitor
Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.
HighCVSS 8.0No exploitEPSS 0%damicms · damicmsAug 12, 2021
- CVE-2018-2057130Monitor
DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=T
HighCVSS 7.5No exploitEPSS 1%damicms · damicmsDec 28, 2018
- CVE-2018-1623829Monitor
An issue was discovered in damiCMS V6.0.1.
HighCVSS 7.2No exploitEPSS 2%damicms · damicmsAug 30, 2018
- CVE-2018-1483119Monitor
An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a craf
MediumCVSS 4.9No exploitEPSS 2%damicms · damicmsJul 10, 2019
- CVE-2020-1845119Monitor
Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
MediumCVSS 4.8No exploitEPSS 1%damicms · damicmsAug 12, 2021
- CVE-2018-1623710Monitor
An issue was discovered in damiCMS V6.0.1.
LowCVSS 2.7No exploitEPSS 1%damicms · damicmsAug 30, 2018