Login Request a demo
NO
Product
Nonecms
by 5none · last CVE May 8, 2023
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 4Medium 7Low 0
Severity
All severities12Critical1High4Medium7Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Nonecms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-7219
8.8
1%
Feb 19
application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html…
Affected: 1.3.0
CVE-2020-18647
7.5
2%
Jun 22
Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor"
Affected: 1.3.0
CVE-2020-18646
7.5
2%
Jun 22
Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php"
Affected: 1.3.0
CVE-2018-6029
7.5
1%
Jan 23
The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of internal and external network resources via Server…
Affected: 1.3.0
Showing 4