Export limit exceeded: 11141 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Results 2

Export CSV
CVE-2017-9673

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new URI) or change its settings (via the index.php/user/1 URI), including its password.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2017-9674

In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?return_url=[XSS] exploitable as a regular or admin user.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products