Generic Content Management System Project Generic Content Management System
4 CVEs affecting Generic Content Management System Project Generic Content Management System. Latest disclosed: 2018-12-30. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20569 | Critical | 9.8 | 2018-12-28 | user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass. |
CVE-2018-20568 | Critical | 9.8 | 2018-12-28 | Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass. |
CVE-2018-20590 | Medium | 4.8 | 2018-12-30 | Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID. |
CVE-2018-20589 | Medium | 4.8 | 2018-12-30 | Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID. |