5none Nonecms
12 CVEs affecting 5none Nonecms. Latest disclosed: 2023-05-08. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20062 | Critical | 9.8 | 2018-12-11 | An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter par… |
CVE-2018-7219 | High | 8.8 | 2018-02-19 | application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/adm… |
CVE-2020-18647 | High | 7.5 | 2021-06-22 | Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor". |
CVE-2020-18646 | High | 7.5 | 2021-06-22 | Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php". |
CVE-2018-6029 | High | 7.5 | 2018-01-23 | The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of internal and external network r… |
CVE-2019-16721 | Medium | 6.5 | 2019-09-23 | NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the admin user. |
CVE-2018-6022 | Medium | 6.5 | 2018-01-23 | Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files… |
CVE-2020-18282 | Medium | 6.1 | 2023-05-08 | Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML via feedback feature. |
CVE-2020-23376 | Medium | 6.1 | 2021-05-10 | NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrar… |
CVE-2020-23371 | Medium | 6.1 | 2021-05-10 | Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inj… |
CVE-2020-23374 | Medium | 5.4 | 2021-05-10 | Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HT… |
CVE-2020-23373 | Medium | 5.4 | 2021-05-10 | Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML v… |