Adaptcms

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-1060 MEDIUM POC This Month

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Open Redirect Adaptcms

NVD Exploit-DB

CVSS 2.0

5.8

EPSS

9.1%

CVE-2015-1059 MEDIUM POC This Month

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE PHP Code Injection File Upload Adaptcms

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

4.5%

CVE-2015-1058 MEDIUM POC THREAT This Month

Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Category][title] parameter to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 14.0%.

XSS Adaptcms

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

14.0%

CVE-2015-1060

EPSS 9% CVSS 5.8

MEDIUM POC This Month

PHP Open Redirect Adaptcms

NVD Exploit-DB

CVE-2015-1059

EPSS 4% CVSS 6.5

MEDIUM POC This Month

RCE PHP Code Injection +2

NVD Exploit-DB

CVE-2015-1058

EPSS 14% CVSS 4.3

MEDIUM POC THREAT This Month

XSS Adaptcms

NVD Exploit-DB