Tilde Cms Project Tilde Cms
4 CVEs affecting Tilde Cms Project Tilde Cms. Latest disclosed: 2017-07-24. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11324 | Critical | 9.8 | 2017-07-24 | An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL In… |
CVE-2017-11326 | High | 7.5 | 2017-07-24 | An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation. |
CVE-2017-11325 | High | 7.5 | 2017-07-24 | An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php. |
CVE-2017-11327 | Medium | 6.5 | 2017-07-24 | An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources… |