Portfoliocms Project
Portfoliocms Project Portfoliocms: vulnerabilidades y CVE
Portfoliocms Project Portfoliocms tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-36532 | Alta (8.1) | 0.79% | — | 3 feb 2023 | Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php. |
| CVE-2020-20402 | Alta (7.5) | 0.75% | — | 31 ene 2023 | Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation. |
| CVE-2018-15849 | Media (4.3) | 0.36% | — | 25 ago 2018 | An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php. |
| CVE-2018-15848 | Alta (8.8) | 0.47% | — | 25 ago 2018 | An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true. |
| CVE-2018-12263 | Alta (8.8) | 1.1% | — | 13 jun 2018 | portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI. |
| CVE-2018-12110 | Alta (7.2) | 1.1% | — | 11 jun 2018 | portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter. |