Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2024-31613

BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code."

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Bosscms
Products
Bosscms
CVE-2024-22938

Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Bosscms
Products
Bosscms
CVE-2022-44937

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Bosscms
Products
Bosscms
CVE-2022-28606

An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Bosscms
Products
Bosscms