Vulnerabilities (CVE)

Filtered by vendor Kitesky Subscribe

CVSS v3 Filter

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Search

Total 2 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2020-20671	1 Kitesky	1 Kitecms	2021-09-24	6.8 MEDIUM	8.8 HIGH
A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
CVE-2020-20672	1 Kitesky	1 Kitecms	2021-09-23	6.8 MEDIUM	7.8 HIGH
An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.