Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2020-18132

Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Mipcms
Products
Mipcms
CVE-2020-20582

A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Mipcms
Products
Mipcms
CVE-2020-19264

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mipcms
Products
Mipcms
CVE-2020-19263

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mipcms
Products
Mipcms