Search vulnerabilities

Results 6

Export CSV
CVE-2021-45380

AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php

CVSS 3.1 · 6.1 Medium EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2020-36007

AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2020-36004

AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2019-9595

AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products