Skip to content
Noroxi

weaselcms project records

5 published records for vendor weaselcms project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2018-16352
    39Monitor

    There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the im

    CriticalCVSS 9.8No exploitEPSS 1%

    weaselcms project · weaselcmsSep 2, 2018

  • CVE-2018-14958
    35Monitor

    An issue was discovered in WeaselCMS v0.3.5.

    HighCVSS 8.8No exploitEPSS 0%

    weaselcms project · weaselcmsAug 5, 2018

  • CVE-2018-14959
    35Monitor

    An issue was discovered in WeaselCMS v0.3.5.

    HighCVSS 8.8No exploitEPSS 0%

    weaselcms project · weaselcmsAug 5, 2018

  • CVE-2018-17361
    24Monitor

    Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.ph

    MediumCVSS 6.1No exploitEPSS 0%

    weaselcms project · weaselcmsSep 23, 2018

  • CVE-2018-14877
    21Monitor

    An issue was discovered in WeaselCMS v0.3.5.

    MediumCVSS 5.4No exploitEPSS 0%

    weaselcms project · weaselcmsAug 2, 2018