Vulnerabilities (CVE)

Filtered by vendor Ed01-cms Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-28524 1 Ed01-cms Project 1 Ed01-cms 2022-05-04 7.5 HIGH 9.8 CRITICAL
ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php.
CVE-2020-18262 1 Ed01-cms Project 1 Ed01-cms 2021-11-05 7.5 HIGH 9.8 CRITICAL
ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter.
CVE-2020-18261 1 Ed01-cms Project 1 Ed01-cms 2021-11-05 7.5 HIGH 9.8 CRITICAL
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.