Export limit exceeded: 12012 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2021-36546

Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Kitesky
Products
Kitecms
CVE-2021-3267

File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Kitesky
Products
Kitecms
CVE-2021-31707

Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Kitesky
Products
Kitecms
CVE-2020-20521

Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Kitesky
Products
Kitecms
CVE-2020-20522

Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Kitesky
Products
Kitecms
CVE-2022-28445

KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Kitesky
Products
Kitecms
CVE-2021-31731

A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Kitesky
Products
Kitecms
CVE-2020-20672

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Kitesky
Products
Kitecms
CVE-2020-20671

A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Kitesky
Products
Kitecms