Baijiacms Project
Baijiacms Project Baijiacms: vulnerabilidades y CVE
Baijiacms Project Baijiacms tiene 11 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-33396 | Media (6.5) | 0.32% | — | 15 feb 2023 | Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php. |
| CVE-2022-45942 | Alta (8.8) | 22% | — | 20 dic 2022 | A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4. |
| CVE-2022-38931 | Alta (8.8) | 1.3% | — | 20 sept 2022 | A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url… |
| CVE-2022-35150 | Crítica (9.8) | 1.2% | — | 22 ago 2022 | Baijicms v4 was discovered to contain an arbitrary file upload vulnerability. |
| CVE-2020-25873 | Media (6.5) | 1.2% | — | 29 oct 2021 | A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter. |
| CVE-2019-7568 | Crítica (9.8) | 1.5% | — | 7 feb 2019 | An issue was discovered in baijiacms V4 that can result in time-based blind SQL injection to get data via the cate parameter in an index.php?act=index request. |
| CVE-2018-16725 | Media (6.1) | 0.71% | — | 8 sept 2018 | An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash component." |
| CVE-2018-16724 | Crítica (9.8) | 1.2% | — | 8 sept 2018 | An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index request. |
| CVE-2018-10503 | Alta (8.8) | 0.50% | — | 27 abr 2018 | An issue was discovered in index.php in baijiacms V4 v4_1_4_20170105. CSRF allows adding an administrator account via op=edituser, changing the administrator password via op=changepwd, or deleting an account via… |
| CVE-2018-10249 | Alta (8.8) | 0.49% | — | 20 abr 2018 | baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account. |
| CVE-2018-10219 | Media (5.3) | 0.85% | — | 19 abr 2018 | baijiacms V3 has physical path leakage via an index.php?mod=mobile&name=member&do=index request. |