Skip to content
Noroxi

native-php-cms project records

6 published records for vendor native-php-cms project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2021-36503
    39Monitor

    SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php f

    CriticalCVSS 9.8No exploitEPSS 1%

    native-php-cms project · native-php-cmsFeb 3, 2023

  • CVE-2025-0482
    27Monitor

    Fanli2012 native-php-cms user_recoverpwd.php default credentials

    MediumCVSS 6.9No exploitEPSS 1%

    native-php-cms project · native-php-cmsJan 15, 2025

  • CVE-2025-0490
    21Monitor

    Fanli2012 native-php-cms article_dodel.php sql injection

    MediumCVSS 5.3No exploitEPSS 1%

    native-php-cms project · native-php-cmsJan 15, 2025

  • CVE-2025-0488
    21Monitor

    Fanli2012 native-php-cms product_list.php sql injection

    MediumCVSS 5.3No exploitEPSS 0%

    native-php-cms project · native-php-cmsJan 15, 2025

  • CVE-2025-0489
    21Monitor

    Fanli2012 native-php-cms friendlink_dodel.php sql injection

    MediumCVSS 5.3No exploitEPSS 0%

    native-php-cms project · native-php-cmsJan 15, 2025

  • CVE-2025-0483
    21Monitor

    Fanli2012 native-php-cms jump.php cross site scripting

    MediumCVSS 5.3No exploitEPSS 0%

    native-php-cms project · native-php-cmsJan 15, 2025