Skip to content
Noroxi

SiberianCMS records

7 published records for vendor siberiancms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

7 records
  • CVE-2023-39375
    39Monitor

    SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges

    CriticalCVSS 9.8No exploitEPSS 0%

    siberiancms · siberiancmsSep 27, 2023

  • CVE-2024-41702
    39Monitor

    SiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

    CriticalCVSS 9.8No exploitEPSS 0%

    siberiancms · siberiancmsJul 30, 2024

  • CVE-2023-39378
    35Monitor

    SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user

    HighCVSS 8.8No exploitEPSS 0%

    siberiancms · siberiancmsSep 27, 2023

  • CVE-2023-39377
    28Monitor

    SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filet

    HighCVSS 7.2No exploitEPSS 1%

    siberiancms · siberiancmsSep 27, 2023

  • CVE-2023-39376
    26Monitor

    SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network

    MediumCVSS 6.5No exploitEPSS 0%

    siberiancms · siberiancmsSep 27, 2023

  • CVE-2017-6906
    24Monitor

    An issue was discovered in SiberianCMS before 4.10.0.

    MediumCVSS 6.1No exploitEPSS 0%

    siberiancms · siberiancmsMar 14, 2017

  • CVE-2025-1105
    21Monitor

    SiberianCMS HTTP GET Request flat cross site scripting

    MediumCVSS 5.3No exploitEPSS 0%

    siberiancms · siberiancmsFeb 7, 2025