Articlecms Project Articlecms
4 CVEs affecting Articlecms Project Articlecms. Latest disclosed: 2021-05-13. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28063 | Critical | 9.8 | 2021-05-13 | A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell. |
CVE-2020-20092 | Critical | 9.8 | 2021-05-13 | File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after… |
CVE-2018-19469 | Medium | 6.1 | 2018-11-23 | ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter. |
CVE-2018-12339 | Medium | 5.4 | 2018-06-13 | ArticleCMS through 2017-02-19 has XSS via an "add an article" action. |