Oecms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-1010112 Jul 18, 19:15 HIGH POC This Week

OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery (CSRF). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Oecms

NVD GitHub

CVSS 3.0

8.8

EPSS

0.7%

CVE-2018-12095 Jun 11, 11:29 MEDIUM POC This Month

A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Oecms

NVD Exploit-DB

CVSS 3.0

5.4

EPSS

5.6%

CVE-2019-1010112

EPSS 1% CVSS 8.8

HIGH POC This Week

PHP CSRF Oecms

NVD GitHub

CVE-2018-12095

EPSS 6% CVSS 5.4

MEDIUM POC This Month

PHP XSS Oecms

NVD Exploit-DB