Skip to content
Noroxi

ukcms records

4 published records for vendor ukcms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2019-10888
    35Monitor

    A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html.

    HighCVSS 8.8No exploitEPSS 1%

    ukcms · ukcmsApr 5, 2019

  • CVE-2018-14911
    28Monitor

    A file upload vulnerability exists in ukcms v1.1.7 and earlier.

    HighCVSS 7.2No exploitEPSS 1%

    ukcms · ukcmsAug 3, 2018

  • CVE-2020-18449
    21Monitor

    Cross Site Scripting (XSS) vulnerability exists in UKCMS v1.1.10 via data in the index function in Single.php

    MediumCVSS 5.4No exploitEPSS 1%

    ukcms · ukcmsAug 12, 2021

  • CVE-2020-20977
    21Monitor

    A stored cross site scripting (XSS) vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scr

    MediumCVSS 5.4No exploitEPSS 1%

    ukcms · ukcmsAug 12, 2021