Blueriver Muracms
2 CVEs affecting Blueriver Muracms. Latest disclosed: 2018-02-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7486 | High | 7.2 | 2018-02-26 | Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end tag, without proper restrictions on file types or pathnames, w… |
CVE-2017-8302 | Medium | 5.4 | 2017-04-27 | Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to admin/core/views/carch/list.cfm, admin/core/views/carch/loadsiteflat.cfm, admin/core/views/… |