Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-36547

A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file.

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Mara Cms Project
Products
Mara Cms
CVE-2020-25422

A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Mara Cms Project
Products
Mara Cms
CVE-2020-24223

Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters.

CVSS 3.1 · 6.1 Medium EPSS 14.6% KEV · Not listed
Vendors
Mara Cms Project
Products
Mara Cms