RSS   Vulnerabilities for 'Greencms'   RSS

2018-11-20
 
CVE-2018-19376

CWE-352
 

 
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to delete a log file via the index.php?m=admin&c=data&a=clear URI.

 
2018-11-17
 
CVE-2018-19329

CWE-425
 

 
GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile delete button.

 
2018-06-29
 
CVE-2018-12988

CWE-20
 

 
GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a=downfile URI.

 


Copyright 2024, cxsecurity.com

 

Back to Top