ilch records

8 published records for vendor ilch.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
29Monitor	CVE-2019-17046No exploit	Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.ilch · ilch cms · CWE-434 RCE File upload	High7.2	—	4.4%	Sep 30, 2019
27Monitor	CVE-2015-2083No exploit	Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authentication of administrators for requeilch · cms · CWE-352 Pre-auth CSRF	Medium6.8	—	0.6%	Feb 25, 2015
24Monitor	CVE-2019-20523No exploit	ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.ilch · ilch cms · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Mar 19, 2020
24Monitor	CVE-2019-20524No exploit	ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.ilch · ilch cms · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Mar 19, 2020
24Monitor	CVE-2019-20522No exploit	ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.ilch · ilch cms · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Mar 19, 2020
21Monitor	CVE-2021-27352No exploit	An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.ilch · ilch cms · CWE-601 Open redirect	Medium5.4	—	0.8%	Mar 29, 2021
19Monitor	CVE-2019-17045No exploit	Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.ilch · ilch cms · CWE-79 XSS	Medium4.8	—	0.7%	Sep 30, 2019
18Monitor	CVE-2014-1944Proof of concept	Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the ilch · ilch cms · CWE-79 Pre-auth XSS	Medium4.3	—	3.3%	Mar 9, 2014

CVE-2019-17046
29Monitor
Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.
HighCVSS 7.2No exploitEPSS 4%
- RCE
- File upload
ilch · ilch cmsSep 30, 2019
CVE-2015-2083
27Monitor
Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authentication of administrators for reque
MediumCVSS 6.8No exploitEPSS 1%
- Pre-auth
- CSRF
ilch · cmsFeb 25, 2015
CVE-2019-20523
24Monitor
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
ilch · ilch cmsMar 19, 2020
CVE-2019-20524
24Monitor
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
ilch · ilch cmsMar 19, 2020
CVE-2019-20522
24Monitor
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
ilch · ilch cmsMar 19, 2020
CVE-2021-27352
21Monitor
An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.
MediumCVSS 5.4No exploitEPSS 1%
- Open redirect
ilch · ilch cmsMar 29, 2021
CVE-2019-17045
19Monitor
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
ilch · ilch cmsSep 30, 2019
CVE-2014-1944
18Monitor
Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the
MediumCVSS 4.3Proof of conceptEPSS 3%
- Pre-auth
- XSS
ilch · ilch cmsMar 9, 2014