Creatiwity Witycms
7 CVEs affecting Creatiwity Witycms. Latest disclosed: 2022-06-02. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-12065 | Critical | 9.8 | 2018-06-08 | A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files (execute PHP c… |
CVE-2022-29725 | High | 8.8 | 2022-06-02 | An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2018-14029 | High | 8.8 | 2018-07-13 | CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifying the account's em… |
CVE-2018-16250 | Medium | 5.4 | 2019-06-20 | The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name"… |
CVE-2018-16776 | Medium | 4.8 | 2018-09-10 | wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page. |
CVE-2018-11512 | Medium | 4.8 | 2018-05-28 | Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1… |
CVE-2018-16251 | Medium | 4.3 | 2019-06-20 | A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin… |