Generic Content Management System CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2018-20590

Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Generic Content Management System Project

Products

Generic Content Management System

CVE-2018-20589

Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Generic Content Management System Project

Products

Generic Content Management System

CVE-2018-20569

user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed

Vendors

Generic Content Management System Project

Products

Generic Content Management System

CVE-2018-20568

Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed

Vendors

Generic Content Management System Project

Products

Generic Content Management System

Page 1 of 1.