dswjcms project records

4 published records for vendor dswjcms project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
39Monitor	CVE-2020-19267No exploit	An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.dswjcms project · dswjcms · CWE-434 pre-auth RCE File upload	Critical9.8	1.6%Sep 9, 2021
24Monitor	CVE-2020-19265No exploit	A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows attackers to executdswjcms project · dswjcms · CWE-79 pre-auth RCE XSS	Medium6.1	0.6%Sep 9, 2021
24Monitor	CVE-2020-19266No exploit	A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to edswjcms project · dswjcms · CWE-79 pre-auth RCE XSS	Medium6.1	0.6%Sep 9, 2021
22Monitor	CVE-2020-19268No exploit	A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add admindswjcms project · dswjcms · CWE-352 CSRF	Medium5.7	0.3%Sep 9, 2021

CVE-2020-19267
39Monitor
An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- File upload
dswjcms project · dswjcmsSep 9, 2021
CVE-2020-19265
24Monitor
A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows attackers to execut
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
dswjcms project · dswjcmsSep 9, 2021
CVE-2020-19266
24Monitor
A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to e
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
dswjcms project · dswjcmsSep 9, 2021
CVE-2020-19268
22Monitor
A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add admin
MediumCVSS 5.7No exploitEPSS 0%
- CSRF
dswjcms project · dswjcmsSep 9, 2021