siberiancms Summary

Latest vulnerabilities published by siberiancms

JSON RSS CSV 🔔 Create Alert Trigger

30 July 2024

SQL Injection Vulnerability Affects SiberianCMS Users
CVE-2024-41702
SiberiancmsSiberiancms V5.0.89.8CRITICAL

27 September 2023

SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges
CVE-2023-39375
SiberiancmsSiberiancms7.5HIGH
SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network
CVE-2023-39376
SiberiancmsSiberiancms6.5MEDIUM
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method
CVE-2023-39377
SiberiancmsSiberiancms7.2HIGH
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user
CVE-2023-39378
SiberiancmsSiberiancms8.8HIGH

15 March 2017

Cross-Site Scripting Vulnerability in SiberianCMS by Siberian.
CVE-2017-6906
SiberiancmsSiberiancms6.1MEDIUM

No more vulnerabilities to load.