Vulnerabilities (CVE)

Filtered by vendor Portfoliocms Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-12263 1 Portfoliocms Project 1 Portfoliocms 2020-02-20 6.5 MEDIUM 8.8 HIGH
portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI.
CVE-2018-15848 1 Portfoliocms Project 1 Portfoliocms 2018-10-17 6.8 MEDIUM 8.8 HIGH
An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true.
CVE-2018-12110 1 Portfoliocms Project 1 Portfoliocms 2018-07-27 6.5 MEDIUM 7.2 HIGH
portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter.