NO
Product
Nonecms
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 7Low 0
Watch
Add Nonecms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-20062 In wildKEV | 9.8 | Dec 11 | ThinkPHP "noneCms" Remote Code Execution Vulnerability Affected: 1.3.0 |
| CVE-2018-7219 | 8.8 | Feb 19 | application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html… Affected: 1.3.0 |
| CVE-2020-18647 | 7.5 | Jun 22 | Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor" Affected: 1.3.0 |
| CVE-2020-18646 | 7.5 | Jun 22 | Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php" Affected: 1.3.0 |
| CVE-2018-6029 | 7.5 | Jan 23 | The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of internal and external network resources via Server… Affected: 1.3.0 |
| CVE-2019-16721 | 6.5 | Sep 23 | NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the admin user Affected: 1.3.0 |
| CVE-2018-6022 | 6.5 | Jan 23 | Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files by leveraging… Affected: through 1.3.0 |
| CVE-2020-18282 | 6.1 | May 8 | Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML via feedback feature Affected: 1.3.0 |
| CVE-2020-23376 | 6.1 | May 10 | NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML… Affected: 1.3.0 |
| CVE-2020-23371 | 6.1 | May 10 | Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web… Affected: 1.3.0 |
| CVE-2020-23374 | 5.4 | May 10 | Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name… Affected: 1.3.0 |
| CVE-2020-23373 | 5.4 | May 10 | Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name… Affected: 1.3.0 |
Showing 12