Login Request a demo
DA
Product
Damicms
by Damicms · last CVE Dec 27, 2021
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 7Medium 2Low 1
Severity
All severities11Critical1High7Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Damicms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-21236
8.8
1%
Dec 27
A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie
Affected: 6.0.0
CVE-2018-16331
8.8
1%
Sep 2
admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password
Affected: 6.0.0
CVE-2018-15844
8.8
2%
Aug 25
An issue was discovered in DamiCMS 6.0.0
Affected: 6.0.0
CVE-2018-13031
8.8
1%
Jul 5
DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account
Affected: 6.0.0
CVE-2020-18458
8.0
0%
Aug 12
Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd
Affected: 6.0.6
CVE-2018-20571
7.5
1%
Dec 28
DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by…
Affected: 6.0.1
CVE-2018-16238
7.2
2%
Aug 30
An issue was discovered in damiCMS V6.0.1
Affected: 6.0.1
Showing 7