Popojicms
1 CVEs across 1 Popojicms products. Browse Popojicms vulnerabilities, severities, and proof-of-concept exploits.
Popojicms products with known CVEs
Popojicms CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-58284 | High | 7.2 | 2025-12-10 | PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the meta… |
CVE-2023-50011 | High | 7.2 | 2023-12-14 | PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field. |
CVE-2023-5910 | Low | 2.6 | 2023-11-02 | A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing of the file install.php of the component… |
CVE-2022-47766 | High | 8.8 | 2023-01-19 | PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability. |
CVE-2021-28070 | Medium | 4.3 | 2021-08-25 | Cross Site Request Forgery (CSRF) vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete. |
CVE-2020-19547 | Medium | 6.5 | 2021-08-25 | Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php. |
CVE-2020-18065 | Medium | 5.4 | 2021-08-25 | Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu. |
CVE-2020-21357 | Medium | 6.1 | 2021-08-06 | A stored cross site scripting (XSS) vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML… |
CVE-2020-21356 | Medium | 5.3 | 2021-08-06 | An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file… |
CVE-2019-18816 | Medium | 6.1 | 2019-11-07 | po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS. |
CVE-2019-18815 | Medium | 6.1 | 2019-11-07 | PopojiCMS 2.0.1 allows refer= Open Redirection. |
CVE-2019-9549 | High | 8.8 | 2019-03-03 | An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a sim… |
CVE-2018-18936 | High | 7.5 | 2018-11-05 | An issue was discovered in PopojiCMS v2.0.1. admin_library.php allows remote attackers to delete arbitrary files via directory traversal in the po-admin/route… |
CVE-2018-18935 | High | 8.8 | 2018-11-05 | An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as demonstrated by adding a level=1 account. |
CVE-2018-18934 | Critical | 9.8 | 2018-11-05 | An issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload pa… |