Thedigitalcraft Atomcms
11 CVEs affecting Thedigitalcraft Atomcms. Latest disclosed: 2025-12-22. Critical: 8, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28036 | Critical | 9.8 | 2022-04-12 | AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php |
CVE-2022-28035 | Critical | 9.8 | 2022-04-12 | Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php |
CVE-2022-28034 | Critical | 9.8 | 2022-04-12 | AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php |
CVE-2022-28033 | Critical | 9.8 | 2022-04-12 | Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php |
CVE-2022-28032 | Critical | 9.8 | 2022-04-12 | AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php |
CVE-2022-25488 | Critical | 9.8 | 2022-03-15 | Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php. |
CVE-2022-25487 | Critical | 9.8 | 2022-03-15 | Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. |
CVE-2022-24223 | Critical | 9.8 | 2022-02-01 | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. |
CVE-2023-53975 | High | 7.5 | 2025-12-22 | Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters… |
CVE-2022-25489 | Medium | 5.4 | 2022-03-15 | Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php. |
CVE-2014-4852 | | 2014-07-10 | SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the… |