Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2635▼ 213 respecto a la semana anterior
Críticas / altas1376▲ 145 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.3) | 0.47% | — | Thedigitalcraft Atomcms | 22/12/2025 | 17/6/2026 | Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL injection attacks. | |
| Modificada | Crítica (9.8) | 1.4% | — | Thedigitalcraft Atomcms | 12/4/2022 | 17/6/2026 | AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php | |
| Modificada | Crítica (9.8) | 1.4% | — | Thedigitalcraft Atomcms | 12/4/2022 | 17/6/2026 | Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php | |
| Modificada | Crítica (9.8) | 1.4% | — | Thedigitalcraft Atomcms | 12/4/2022 | 17/6/2026 | AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php | |
| Modificada | Crítica (9.8) | 5.3% | — | Thedigitalcraft Atomcms | 12/4/2022 | 17/6/2026 | Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php | |
| Modificada | Crítica (9.8) | 5.9% | — | Thedigitalcraft Atomcms | 12/4/2022 | 17/6/2026 | AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php | |
| Modificada | Media (5.4) | 1.5% | — | Thedigitalcraft Atomcms | 15/3/2022 | 17/6/2026 | Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php. | |
| Modificada | Crítica (9.8) | 7.1% | — | Thedigitalcraft Atomcms | 15/3/2022 | 17/6/2026 | Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php. | |
| Modificada | Crítica (9.8) | 54% | — | Thedigitalcraft Atomcms | 15/3/2022 | 17/6/2026 | Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. | |
| Modificada | Crítica (9.8) | 62% | — | Thedigitalcraft Atomcms | 1/2/2022 | 17/6/2026 | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. | |
| Modificada | Alta (7.5) | 2.2% | — | Thedigitalcraft Atomcms | 10/7/2014 | 17/6/2026 | SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the id parameter. |