Skip to content
Noroxi

puppycms records

5 published records for vendor puppycms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21
  3. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2020-18890
    39Monitor

    Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via

    CriticalCVSS 9.8No exploitEPSS 1%

    puppycms · puppycmsMay 6, 2021

  • CVE-2020-18888
    30Monitor

    Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php.

    HighCVSS 7.5No exploitEPSS 0%

    puppycms · puppycmsMay 6, 2021

  • CVE-2020-18889
    26Monitor

    Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php.

    MediumCVSS 6.5No exploitEPSS 0%

    puppycms · puppycmsMay 6, 2021

  • CVE-2018-15847
    24Monitor

    An issue was discovered in puppyCMS 5.1.

    MediumCVSS 6.1No exploitEPSS 0%

    puppycms · puppycmsAug 25, 2018

  • CVE-2022-3464
    24Monitor

    puppyCMS settings.php cross site scripting

    MediumCVSS 6.1Proof of conceptEPSS 0%

    puppycms · puppycmsOct 12, 2022