Login Request a demo
CM
Product
Cmswing
by Cmswing · last CVE Mar 23, 2022
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 5High 1Medium 2Low 0
Severity
All severities8Critical5High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cmswing to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-43736
9.8
2%
Mar 23
CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule
Affected: 1.3.7
CVE-2021-43735
9.8
1%
Mar 23
CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule
Affected: 1.3.7
CVE-2020-20296
9.8
1%
Feb 1
An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL…
Affected: 1.3.8
CVE-2020-20295
9.8
1%
Feb 1
An issue was found in CMSWing project version 1.3.8
Affected: 1.3.8
CVE-2020-20294
9.8
2%
Feb 1
An issue was found in CMSWing project version 1.3.8
Affected: 1.3.8
CVE-2019-7649
7.5
1%
Feb 17
global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing
Affected: 1.3.7
CVE-2020-24993
5.4
1%
May 17
There is a cross site scripting vulnerability on CmsWing 1.3.7
Affected: 1.3.7
CVE-2020-24992
5.4
1%
May 17
There is a cross site scripting vulnerability on CmsWing 1.3.7
Affected: 1.3.7
Showing 8