Nucleuscms Nucleus Cms
4 CVEs affecting Nucleuscms Nucleus Cms. Latest disclosed: 2022-06-30. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-37770 | High | 7.2 | 2022-06-30 | Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the path without the Htacce… |
CVE-2018-16636 | Medium | 6.5 | 2018-12-10 | Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter. |
CVE-2015-5454 | | 2015-07-08 | Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a ne… | |
CVE-2011-3760 | | 2011-09-24 | Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error messa… |