İçeriğe atla
Noroxi

cmseasy kayıtları

cmseasy üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 22
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

23 kayıt
  • CVE-2023-34880
    39İzleyin

    cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.php

    KritikCVSS 9,8İstismar yokEPSS %1

    cmseasy · cmseasy15 Haz 2023

  • CVE-2024-0523
    39İzleyin

    CmsEasy language_admin.php getslide_child_action sql injection

    KritikCVSS 9,8İstismar yokEPSS %1

    cmseasy · cmseasy14 Oca 2024

  • CVE-2021-42643
    36İzleyin

    cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %2

    cmseasy · cmseasy17 May 2022

  • CVE-2018-11679
    35İzleyin

    An issue was discovered in CmsEasy 6.1_20180508.

    YüksekCVSS 8,8İstismar yokEPSS %1

    cmseasy · cmseasy2 Haz 2018

  • CVE-2024-31551
    30İzleyin

    Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via c

    YüksekCVSS 7,5İstismar yokEPSS %1

    cmseasy · cmseasy26 Nis 2024

  • CVE-2024-34315
    30İzleyin

    CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fckedit_action meth

    YüksekCVSS 7,5İstismar yokEPSS %1

    cmseasy · cmseasy7 May 2024

  • CVE-2020-18406
    30İzleyin

    An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encryption of form data.

    YüksekCVSS 7,5İstismar yokEPSS %0

    cmseasy · cmseasy27 Haz 2023

  • CVE-2021-42644
    26İzleyin

    cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability.

    OrtaCVSS 6,5İstismar yokEPSS %1

    cmseasy · cmseasy17 May 2022

  • CVE-2018-11680
    26İzleyin

    An issue was discovered in CmsEasy 6.1_20180508.

    OrtaCVSS 6,5İstismar yokEPSS %0

    cmseasy · cmseasy2 Haz 2018

  • CVE-2024-32163
    25İzleyin

    CMSeasy 7.7.7.9 is vulnerable to code execution.

    OrtaCVSS 6,4İstismar yokEPSS %0

    cmseasy · cmseasy17 Nis 2024

  • CVE-2025-55910
    25İzleyin

    CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php.

    OrtaCVSS 6,3İstismar yokEPSS %0

    cmseasy · cmseasy19 Eyl 2025

  • CVE-2019-8434
    24İzleyin

    In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter.

    OrtaCVSS 6,1İstismar yokEPSS %1

    cmseasy · cmseasy17 Şub 2019

  • CVE-2019-8432
    24İzleyin

    In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter.

    OrtaCVSS 6,1İstismar yokEPSS %1

    cmseasy · cmseasy17 Şub 2019

  • CVE-2025-1336
    21İzleyin

    CmsEasy image_admin.php deleteimg_action path traversal

    OrtaCVSS 5,3İstismar yokEPSS %1

    cmseasy · cmseasy16 Şub 2025

  • CVE-2025-1106
    21İzleyin

    CmsEasy database_admin.php restore_action path traversal

    OrtaCVSS 5,3İstismar yokEPSS %1

    cmseasy · cmseasy7 Şub 2025

  • CVE-2025-1335
    21İzleyin

    CmsEasy file_admin.php deleteimg_action path traversal

    OrtaCVSS 5,3İstismar yokEPSS %1

    cmseasy · cmseasy16 Şub 2025

  • CVE-2025-0973
    21İzleyin

    CmsEasy index.php backAll_action path traversal

    OrtaCVSS 5,3İstismar yokEPSS %1

    cmseasy · cmseasy2 Şub 2025

  • CVE-2024-25828
    19İzleyin

    cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php.

    OrtaCVSS 4,9İstismar yokEPSS %1

    cmseasy · cmseasy22 Şub 2024

  • CVE-2024-34314
    19İzleyin

    CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fetch_action method

    OrtaCVSS 4,9İstismar yokEPSS %0

    cmseasy · cmseasy7 May 2024

  • CVE-2024-32162
    17İzleyin

    CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion.

    OrtaCVSS 4,3İstismar yokEPSS %0

    cmseasy · cmseasy17 Nis 2024

  • CVE-2024-32236
    14İzleyin

    An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php compo

    DüşükCVSS 3,5İstismar yokEPSS %0

    cmseasy · cmseasy25 Nis 2024

  • CVE-2025-15148
    8İzleyin

    CmsEasy Backend Template Management template_admin.php savetemp_action code injection

    DüşükCVSS 2,0İstismar yokEPSS %0

    cmseasy · cmseasy28 Ara 2025

  • CVE-2025-11332
    8İzleyin

    CmsEasy URL view.php cross site scripting

    DüşükCVSS 2,0İstismar yokEPSS %0

    cmseasy · cmseasy6 Eki 2025