Gdidees
Gdidees CMS: vulnerabilidades y CVE
Gdidees CMS tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-46101 | Crítica (9.8) | 0.46% | — | 20 sept 2024 | GDidees CMS <= v3.9.1 has a file upload vulnerability. |
| CVE-2023-44758 | Media (5.4) | 0.48% | — | 6 oct 2023 | GDidees CMS 3.0 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Page Title. |
| CVE-2023-27179 | Alta (7.5) | 61% | — | 11 abr 2023 | GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php. |
| CVE-2023-27178 | Crítica (9.8) | 1.4% | — | 10 abr 2023 | An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted file. |
| CVE-2023-27180 | Alta (7.5) | 1.1% | — | 7 abr 2023 | GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/backup.php. |