Generic Content Management System Project Generic Content Management System

4 CVEs affecting Generic Content Management System Project Generic Content Management System. Latest disclosed: 2018-12-30. Critical: 2, High: 0.

Top CVEs affecting Generic Content Management System Project Generic Content Management System
CVESeverityScorePublishedSummary
CVE-2018-20569Critical9.82018-12-28user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
CVE-2018-20568Critical9.82018-12-28Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
CVE-2018-20590Medium4.82018-12-30Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.
CVE-2018-20589Medium4.82018-12-30Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID.