Ilch
Ilch CMS: vulnerabilidades y CVE
Ilch CMS tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-27352 | Media (5.4) | 0.83% | — | 29 mar 2021 | An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login. |
| CVE-2019-20524 | Media (6.1) | 0.70% | — | 19 mar 2020 | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter. |
| CVE-2019-20523 | Media (6.1) | 0.70% | — | 19 mar 2020 | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter. |
| CVE-2019-20522 | Media (6.1) | 0.69% | — | 19 mar 2020 | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter. |
| CVE-2019-17046 | Alta (7.2) | 4.4% | — | 30 sept 2019 | Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page. |
| CVE-2019-17045 | Media (4.8) | 0.68% | — | 30 sept 2019 | Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab. |
| CVE-2014-1944 | Media (4.3) | 3.3% | — | 9 mar 2014 | Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the text parameter to index.php/guestbook/index/newentry. |