dbhcms project records

15 published records for vendor dbhcms project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

15 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2020-19889No exploit	DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=-70 can add a user.dbhcms project · dbhcms · CWE-352 Pre-auth CSRF	High8.8	—	0.5%	Aug 24, 2020
32Monitor	CVE-2020-19886No exploit	DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu.dbhcms project · dbhcms · CWE-352 Pre-auth CSRF	High8.1	—	0.4%	Aug 24, 2020
30Monitor	CVE-2020-19878No exploit	DBHcms v1.2.0 has a sensitive information leaks vulnerability as there is no security access control in /dbhcms/ext/news/ext.news.be.php, A dbhcms project · dbhcms Pre-auth	High7.5	—	1.5%	Aug 24, 2020
28Monitor	CVE-2020-19891No exploit	DBHcms v1.2.0 has an Arbitrary file write vulnerability in dbhcms\mod\mod.editor.php $_POST['updatefile'] is filename and $_POST['tinymce_codbhcms project · dbhcms · CWE-787 Memory safety	High7.2	—	1.4%	Aug 24, 2020
24Monitor	CVE-2020-19880No exploit	DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function form 'Name' in dbhcms\types.php, A remote unauthenticadbhcms project · dbhcms · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Aug 24, 2020
24Monitor	CVE-2020-19879No exploit	DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $_GET['dbhcms_pid'] variable in dbhcms\page.php line 107,dbhcms project · dbhcms · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Aug 24, 2020
23Monitor	CVE-2020-19888No exploit	DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache odbhcms project · dbhcms · CWE-287 Pre-auth Auth bypass	Medium5.9	—	0.7%	Aug 24, 2020
22Monitor	CVE-2020-19877No exploit	DBHcms v1.2.0 has a directory traversal vulnerability as there is no directory control function in directory /dbhcms/.dbhcms project · dbhcms · CWE-22 Pre-auth Path traversal	Medium5.3	—	1.7%	Aug 24, 2020
19Monitor	CVE-2020-19890No exploit	DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file'] is filename,and as there is no filter funcdbhcms project · dbhcms · CWE-639 Broken access control (IDOR)	Medium4.9	—	0.9%	Aug 24, 2020
19Monitor	CVE-2020-19885No exploit	DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_name']' variable in dbhcdbhcms project · dbhcms · CWE-79 XSS	Medium4.8	—	0.8%	Aug 24, 2020
19Monitor	CVE-2020-19881No exploit	DBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\mod\mod.selector.php line 108 for $_GET['return_namdbhcms project · dbhcms · CWE-79 XSS	Medium4.8	—	0.8%	Aug 24, 2020
19Monitor	CVE-2020-19887No exploit	DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_description']' variable dbhcms project · dbhcms · CWE-79 XSS	Medium4.8	—	0.8%	Aug 24, 2020
19Monitor	CVE-2020-19883No exploit	DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter in dbhcms\mod\mod.users.view.php line 57 for user_login, A remotdbhcms project · dbhcms · CWE-79 XSS	Medium4.8	—	0.8%	Aug 24, 2020
19Monitor	CVE-2020-19882No exploit	DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menu_description' variable in dbhcms\mod\mod.menudbhcms project · dbhcms · CWE-79 XSS	Medium4.8	—	0.8%	Aug 24, 2020
19Monitor	CVE-2020-19884No exploit	DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function in dbhcms\mod\mod.domain.edit.php line 119.dbhcms project · dbhcms · CWE-79 XSS	Medium4.8	—	0.6%	Aug 24, 2020

CVE-2020-19889
35Monitor
DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=-70 can add a user.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19886
32Monitor
DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu.
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- CSRF
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19878
30Monitor
DBHcms v1.2.0 has a sensitive information leaks vulnerability as there is no security access control in /dbhcms/ext/news/ext.news.be.php, A
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19891
28Monitor
DBHcms v1.2.0 has an Arbitrary file write vulnerability in dbhcms\mod\mod.editor.php $_POST['updatefile'] is filename and $_POST['tinymce_co
HighCVSS 7.2No exploitEPSS 1%
- Memory safety
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19880
24Monitor
DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function form 'Name' in dbhcms\types.php, A remote unauthentica
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19879
24Monitor
DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $_GET['dbhcms_pid'] variable in dbhcms\page.php line 107,
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19888
23Monitor
DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache o
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
- Auth bypass
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19877
22Monitor
DBHcms v1.2.0 has a directory traversal vulnerability as there is no directory control function in directory /dbhcms/.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Path traversal
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19890
19Monitor
DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file'] is filename,and as there is no filter func
MediumCVSS 4.9No exploitEPSS 0%
- Broken access control (IDOR)
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19885
19Monitor
DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_name']' variable in dbhc
MediumCVSS 4.8No exploitEPSS 0%
- XSS
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19881
19Monitor
DBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\mod\mod.selector.php line 108 for $_GET['return_nam
MediumCVSS 4.8No exploitEPSS 0%
- XSS
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19887
19Monitor
DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_description']' variable
MediumCVSS 4.8No exploitEPSS 0%
- XSS
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19883
19Monitor
DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter in dbhcms\mod\mod.users.view.php line 57 for user_login, A remot
MediumCVSS 4.8No exploitEPSS 0%
- XSS
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19882
19Monitor
DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menu_description' variable in dbhcms\mod\mod.menu
MediumCVSS 4.8No exploitEPSS 0%
- XSS
dbhcms project · dbhcmsAug 24, 2020
CVE-2020-19884
19Monitor
DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function in dbhcms\mod\mod.domain.edit.php line 119.
MediumCVSS 4.8No exploitEPSS 0%
- XSS
dbhcms project · dbhcmsAug 24, 2020