İçeriğe atla
Noroxi

publiccms kayıtları

publiccms üreticisine ait 47 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
8
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

47 kayıt
  • CVE-2022-23389
    46Planlayın

    PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.

    KritikCVSS 9,8İstismar yokEPSS %22

    publiccms · publiccms14 Şub 2022

  • CVE-2018-12914
    40Planlayın

    A remote code execution issue was discovered in PublicCMS V4.0.20180210.

    KritikCVSS 9,8İstismar yokEPSS %4

    publiccms · publiccms27 Haz 2018

  • CVE-2021-40881
    39İzleyin

    An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code.

    KritikCVSS 9,8İstismar yokEPSS %2

    publiccms · publiccms15 Eyl 2021

  • CVE-2023-46990
    39İzleyin

    Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the

    KritikCVSS 9,8İstismar yokEPSS %1

    publiccms · publiccms20 Kas 2023

  • CVE-2020-20914
    39İzleyin

    SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    publiccms · publiccms4 Nis 2023

  • CVE-2020-20915
    39İzleyin

    SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSite

    KritikCVSS 9,8İstismar yokEPSS %1

    publiccms · publiccms4 Nis 2023

  • CVE-2021-27693
    39İzleyin

    Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage

    KritikCVSS 9,8İstismar yokEPSS %1

    publiccms · publiccms2 Eyl 2022

  • CVE-2023-34852
    39İzleyin

    PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    publiccms · publiccms15 Haz 2023

  • CVE-2025-25361
    39İzleyin

    An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to exe

    KritikCVSS 9,8İstismar yokEPSS %1

    publiccms · publiccms6 Mar 2025

  • CVE-2025-65836
    36İzleyin

    PublicCMS V5.202506.b is vulnerable to SSRF.

    KritikCVSS 9,1İstismar yokEPSS %0

    publiccms · publiccms1 Ara 2025

  • CVE-2024-40550
    35İzleyin

    An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers t

    YüksekCVSS 8,8İstismar yokEPSS %1

    publiccms · publiccms12 Tem 2024

  • CVE-2024-31759
    35İzleyin

    An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function.

    YüksekCVSS 8,8İstismar yokEPSS %1

    publiccms · publiccms16 Nis 2024

  • CVE-2024-40546
    35İzleyin

    An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitr

    YüksekCVSS 8,8İstismar yokEPSS %1

    publiccms · publiccms12 Tem 2024

  • CVE-2024-40552
    35İzleyin

    PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray parameter at /site/Script

    YüksekCVSS 8,8İstismar yokEPSS %1

    publiccms · publiccms12 Tem 2024

  • CVE-2024-40548
    35İzleyin

    An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbit

    YüksekCVSS 8,8İstismar yokEPSS %1

    publiccms · publiccms12 Tem 2024

  • CVE-2024-40549
    35İzleyin

    An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute

    YüksekCVSS 8,8İstismar yokEPSS %1

    publiccms · publiccms12 Tem 2024

  • CVE-2024-40545
    35İzleyin

    An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute ar

    YüksekCVSS 8,8İstismar yokEPSS %1

    publiccms · publiccms12 Tem 2024

  • CVE-2018-11500
    35İzleyin

    An issue was discovered in PublicCMS V4.0.20180210.

    YüksekCVSS 8,8İstismar yokEPSS %1

    publiccms · publiccms26 May 2018

  • CVE-2024-40544
    35İzleyin

    PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/#maintenance_sysTask/edit.

    YüksekCVSS 8,8İstismar yokEPSS %0

    publiccms · publiccms12 Tem 2024

  • CVE-2024-40551
    35İzleyin

    An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute a

    YüksekCVSS 8,8İstismar yokEPSS %0

    publiccms · publiccms12 Tem 2024

  • CVE-2024-40543
    35İzleyin

    PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/ueditor?action=catchimage.

    YüksekCVSS 8,8İstismar yokEPSS %0

    publiccms · publiccms12 Tem 2024

  • CVE-2025-65840
    35İzleyin

    PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController.

    YüksekCVSS 8,8İstismar yokEPSS %0

    publiccms · publiccms1 Ara 2025

  • CVE-2025-69437
    34İzleyin

    PublicCMS v5.202506.d and earlier is vulnerable to stored XSS.

    YüksekCVSS 8,7İstismar yokEPSS %0

    publiccms · publiccms27 Şub 2026

  • CVE-2025-57516
    32İzleyin

    OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary com

    YüksekCVSS 8,2İstismar yokEPSS %1

    publiccms · publiccms29 Eyl 2025

  • CVE-2025-65838
    30İzleyin

    PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method.

    YüksekCVSS 7,5İstismar yokEPSS %0

    publiccms · publiccms1 Ara 2025