DA
Vendor
Damicms
11
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-21236 | DA Damicms Damicms | 8.8 | Dec 27 | A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie |
| CVE-2020-18458 | DA Damicms Damicms | 8.0 | Aug 12 | Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd |
| CVE-2020-18451 | DA Damicms Damicms | 4.8 | Aug 12 | Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php |
| CVE-2018-14831 | DA Damicms Damicms | 4.9 | Jul 10 | An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI |
| CVE-2018-20571 | DA Damicms Damicms | 7.5 | Dec 28 | DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by… |
| CVE-2018-16331 | DA Damicms Damicms | 8.8 | Sep 2 | admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password |
| CVE-2018-16239 | DA Damicms Damicms | 9.8 | Aug 30 | An issue was discovered in damiCMS V6.0.1 |
| CVE-2018-16238 | DA Damicms Damicms | 7.2 | Aug 30 | An issue was discovered in damiCMS V6.0.1 |
| CVE-2018-16237 | DA Damicms Damicms | 2.7 | Aug 30 | An issue was discovered in damiCMS V6.0.1 |
| CVE-2018-15844 | DA Damicms Damicms | 8.8 | Aug 25 | An issue was discovered in DamiCMS 6.0.0 |
| CVE-2018-13031 | DA Damicms Damicms | 8.8 | Jul 5 | DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account |