Skip to content
Noroxi

hoosk records

14 published records for vendor hoosk.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 18
  2. 20
  3. 22
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2020-26041
    40Plan

    An issue was discovered in Hoosk CmS v1.8.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    hoosk · hooskSep 30, 2020

  • CVE-2018-16771
    40Plan

    Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.

    CriticalCVSS 9.8No exploitEPSS 2%

    hoosk · hooskSep 10, 2018

  • CVE-2020-26042
    39Monitor

    An issue was discovered in Hoosk CMS v1.8.0.

    CriticalCVSS 9.8No exploitEPSS 1%

    hoosk · hooskSep 30, 2020

  • CVE-2022-43234
    39Monitor

    An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted

    CriticalCVSS 9.8No exploitEPSS 1%

    hoosk · hooskNov 16, 2022

  • CVE-2018-7590
    35Monitor

    CSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation.

    HighCVSS 8.8No exploitEPSS 0%

    hoosk · hooskMar 1, 2018

  • CVE-2024-51055
    26Monitor

    An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component.

    MediumCVSS 6.5No exploitEPSS 0%

    hoosk · hooskNov 8, 2024

  • CVE-2020-26043
    24Monitor

    An issue was discovered in Hoosk CMS v1.8.0.

    MediumCVSS 6.1No exploitEPSS 0%

    hoosk · hooskSep 30, 2020

  • CVE-2022-28586
    24Monitor

    XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some

    MediumCVSS 6.1No exploitEPSS 0%

    hoosk · hooskApr 25, 2022

  • CVE-2025-25990
    24Monitor

    Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php c

    MediumCVSS 6.1No exploitEPSS 0%

    hoosk · hooskFeb 14, 2025

  • CVE-2021-43478
    21Monitor

    A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, w

    MediumCVSS 5.4No exploitEPSS 0%

    hoosk · hooskMar 31, 2022

  • CVE-2025-25991
    20Monitor

    SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php componen

    MediumCVSS 5.1No exploitEPSS 0%

    hoosk · hooskFeb 14, 2025

  • CVE-2018-16772
    19Monitor

    Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new.

    MediumCVSS 4.8No exploitEPSS 0%

    hoosk · hooskSep 10, 2018

  • CVE-2025-25988
    19Monitor

    Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title paramet

    MediumCVSS 4.8No exploitEPSS 0%

    hoosk · hooskFeb 14, 2025

  • CVE-2020-16610
    17Monitor

    Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF).

    MediumCVSS 4.3No exploitEPSS 0%

    hoosk · hooskAug 28, 2020