RSS   Vulnerabilities for 'Anchor cms'   RSS

2021-01-19
 
CVE-2020-23342

CWE-352
 

 
A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.

 
2017-09-07
 
CVE-2015-5060

 

 
Cross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev.

 
2015-10-05
 
CVE-2015-5687

 

 
system/session/drivers/cookie.php in Anchor CMS 0.9.x allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in a cookie.

 
2014-12-02
 
CVE-2014-9182

CWE-79
 

 
models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messages via a crafted Host: header.

 

 >>> Vendor: Anchorcms 2 Products
Anchor cms
Anchor


Copyright 2021, cxsecurity.com

 

Back to Top