Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2731▲ 24 respecto a la semana anterior

Críticas / altas1467▲ 357 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)68▼ 458 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-37122	Modificada	Media (5.4)	0.34%	—	Bagesoft Bagecms	6/7/2023	17/6/2026	A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Settings module.
CVE-2019-8421	Modificada	Alta (7.2)	1.2%	—	Bagesoft Bagecms	17/2/2019	17/6/2026	upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter.
CVE-2018-19560	Modificada	Alta (8.8)	0.65%	—	Bagesoft Bagecms	26/11/2018	17/6/2026	BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.
CVE-2018-19104	Modificada	Alta (8.8)	0.65%	—	Bagesoft Bagecms	8/11/2018	17/6/2026	In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
CVE-2018-18258	Modificada	Crítica (9.8)	1.5%	—	Bagesoft Bagecms	11/10/2018	17/6/2026	An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.php?r=admini/template/updateTpl&filename= URI.
CVE-2018-18257	Modificada	Alta (7.5)	1.6%	—	Bagesoft Bagecms	11/10/2018	17/6/2026	An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=deleteFile&fileName= or index.php?r=admini/template/batch&command=deleteFolder&folderName=../ directory traversal URI.
CVE-2018-14582	Modificada	Alta (8.8)	0.52%	—	Bagesoft Bagecms	24/7/2018	17/6/2026	index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account.