Dhcms Project

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-28527 Apr 26, 21:15 HIGH POC This Week

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Dhcms Dhcms Project

NVD GitHub

CVSS 3.1

8.1

EPSS

1.1%

CVE-2019-9550 Mar 03, 19:29 MEDIUM POC This Month

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Dhcms Dhcms Project

NVD GitHub

CVSS 3.0

4.8

EPSS

0.6%

CVE-2022-28527

EPSS 1% CVSS 8.1

HIGH POC This Week

PHP Path Traversal Dhcms +1

NVD GitHub

CVE-2019-9550

EPSS 1% CVSS 4.8

MEDIUM POC This Month

PHP XSS Dhcms +1

NVD GitHub