Ionizecms Ionize
4 CVEs affecting Ionizecms Ionize. Latest disclosed: 2022-05-12. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29307 | Critical | 9.8 | 2022-05-12 | IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang_model.php. |
CVE-2022-29306 | Critical | 9.8 | 2022-05-12 | IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php. |
CVE-2022-26272 | Critical | 9.8 | 2022-03-24 | A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/… |
CVE-2017-5961 | Medium | 6.1 | 2017-02-12 | An issue was discovered in ionize through 1.0.8. The vulnerability exists due to insufficient filtration of user-supplied data in the "path" HTTP GET parameter… |