Vulnerabilities (CVE)

Filtered by vendor Kliqqi Subscribe
Filtered by product Kliqqi Cms
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-10756 1 Kliqqi 1 Kliqqi Cms 2019-05-28 6.8 MEDIUM 8.8 HIGH
Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself.
CVE-2018-11405 1 Kliqqi 1 Kliqqi Cms 2018-07-02 6.8 MEDIUM 8.8 HIGH
Kliqqi 2.0.2 has CSRF in admin/admin_users.php.