CM
Vendor
Cmswing
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-43736 | CM Cmswing Cmswing | 9.8 | Mar 23 | CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule |
| CVE-2021-43735 | CM Cmswing Cmswing | 9.8 | Mar 23 | CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule |
| CVE-2020-24993 | CM Cmswing Cmswing | 5.4 | May 17 | There is a cross site scripting vulnerability on CmsWing 1.3.7 |
| CVE-2020-24992 | CM Cmswing Cmswing | 5.4 | May 17 | There is a cross site scripting vulnerability on CmsWing 1.3.7 |
| CVE-2020-20296 | CM Cmswing Cmswing | 9.8 | Feb 1 | An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL… |
| CVE-2020-20295 | CM Cmswing Cmswing | 9.8 | Feb 1 | An issue was found in CMSWing project version 1.3.8 |
| CVE-2020-20294 | CM Cmswing Cmswing | 9.8 | Feb 1 | An issue was found in CMSWing project version 1.3.8 |
| CVE-2019-7649 | CM Cmswing Cmswing | 7.5 | Feb 17 | global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing |