Export limit exceeded: 425871 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2017-11324

An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Tilde Cms Project
Products
Tilde Cms
CVE-2017-11325

An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php.

CVSS 3.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Tilde Cms Project
Products
Tilde Cms
CVE-2017-11326

An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation.

CVSS 3.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Tilde Cms Project
Products
Tilde Cms
CVE-2017-11327

An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftp_upload.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Tilde Cms Project
Products
Tilde Cms