Skip to main content

Green Cms

2 CVEs product

Monthly

CVE-2019-25574 Mar 21, 15:30 MEDIUM POC This Month

Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Green Cms Greencms
NVD Exploit-DB GitHub VulDB
CVSS 3.1
6.5
EPSS
0.1%
CVE-2019-25573 Mar 21, 15:30 HIGH POC This Week

Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Green Cms Greencms
NVD Exploit-DB GitHub VulDB
CVSS 3.1
7.1
EPSS
0.0%
EPSS 0% CVSS 6.5
MEDIUM POC This Month

Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Green Cms Greencms
NVD Exploit-DB GitHub VulDB
EPSS 0% CVSS 7.1
HIGH POC This Week

Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Green Cms +1
NVD Exploit-DB GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy