Skip to content
Noroxi

gleezcms records

4 published records for vendor gleezcms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2021-27312
    37Monitor

    Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive

    CriticalCVSS 9.4No exploitEPSS 1%

    gleezcms · gleez cmsApr 3, 2024

  • CVE-2018-15845
    36Monitor

    There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.

    HighCVSS 8.8Proof of conceptEPSS 2%

    gleezcms · gleez cmsAug 25, 2018

  • CVE-2018-16347
    24Monitor

    An issue was discovered in Gleez CMS v1.2.0.

    MediumCVSS 6.1No exploitEPSS 0%

    gleezcms · gleez cmsSep 2, 2018

  • CVE-2018-7035
    21Monitor

    Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML conte

    MediumCVSS 5.4No exploitEPSS 0%

    gleezcms · gleez cmsApr 5, 2018