Login Request a demo
NO
Product
Nonecms
by 5none · last CVE May 8, 2023
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 4Medium 7Low 0
Severity
All severities12Critical1High4Medium7Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Nonecms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-16721
6.5
1%
Sep 23
NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the admin user
Affected: 1.3.0
CVE-2018-6022
6.5
1%
Jan 23
Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files by leveraging…
Affected: through 1.3.0
CVE-2020-18282
6.1
1%
May 8
Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML via feedback feature
Affected: 1.3.0
CVE-2020-23376
6.1
0%
May 10
NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML…
Affected: 1.3.0
CVE-2020-23371
6.1
1%
May 10
Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web…
Affected: 1.3.0
CVE-2020-23374
5.4
1%
May 10
Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name…
Affected: 1.3.0
CVE-2020-23373
5.4
1%
May 10
Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name…
Affected: 1.3.0
Showing 7