Thedigitalcraft 11 CVEs across 1 Thedigitalcraft products. Browse Thedigitalcraft vulnerabilities, severities, and proof-of-concept exploits.
Thedigitalcraft products with known CVEs Thedigitalcraft CVEs — newest first CVE Severity Score Published Summary CVE-2023-53975High 7.52025-12-22 Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters… CVE-2022-28036Critical 9.82022-04-12 AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php CVE-2022-28035Critical 9.82022-04-12 Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php CVE-2022-28034Critical 9.82022-04-12 AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php CVE-2022-28033Critical 9.82022-04-12 Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php CVE-2022-28032Critical 9.82022-04-12 AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php CVE-2022-25489Medium 5.42022-03-15 Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php. CVE-2022-25488Critical 9.82022-03-15 Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php. CVE-2022-25487Critical 9.82022-03-15 Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. CVE-2022-24223Critical 9.82022-02-01 AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. CVE-2014-48522014-07-10 SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the…