gdidees records
5 published records for vendor gdidees.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
48Plan | CVE-2023-27179Proof of concept | GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdowgdidees · gdidees cms · CWE-434 | High7.5 | — | 60.7% | Apr 11, 2023 |
39Monitor | CVE-2023-27178No exploit | An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted gdidees · gdidees cms · CWE-434 | Critical9.8 | — | 1.3% | Apr 10, 2023 |
39Monitor | CVE-2024-46101No exploit | GDidees CMS <= v3.9.1 has a file upload vulnerability.gdidees · gdidees cms · CWE-434 | Critical9.8 | — | 0.4% | Sep 20, 2024 |
30Monitor | CVE-2023-27180No exploit | GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/bagdidees · gdidees cms · CWE-552 | High7.5 | — | 1.0% | Apr 7, 2023 |
21Monitor | CVE-2023-44758Proof of concept | GDidees CMS 3.0 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted paylgdidees · gdidees cms · CWE-79 | Medium5.4 | — | 0.5% | Oct 6, 2023 |
- CVE-2023-2717948Plan
GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdow
HighCVSS 7.5Proof of conceptEPSS 60%gdidees · gdidees cmsApr 11, 2023
- CVE-2023-2717839Monitor
An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted
CriticalCVSS 9.8No exploitEPSS 1%gdidees · gdidees cmsApr 10, 2023
- CVE-2024-4610139Monitor
GDidees CMS <= v3.9.1 has a file upload vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%gdidees · gdidees cmsSep 20, 2024
- CVE-2023-2718030Monitor
GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/ba
HighCVSS 7.5No exploitEPSS 1%gdidees · gdidees cmsApr 7, 2023
- CVE-2023-4475821Monitor
GDidees CMS 3.0 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payl
MediumCVSS 5.4Proof of conceptEPSS 0%gdidees · gdidees cmsOct 6, 2023