Schlix

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-47964 May 15, 18:36 HIGH POC This Week

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious extension packages through the block. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Code Injection Schlix Cms Schlix

NVD Exploit-DB

CVSS 4.0

8.7

EPSS

0.2%

CVE-2019-11021 Oct 24, 16:15 HIGH This Week

admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP RCE File Upload Cms Schlix

NVD VulDB

CVSS 3.1

7.2

EPSS

2.2%

CVE-2021-47964

EPSS 0% CVSS 8.7

HIGH POC This Week

PHP RCE Code Injection +2

NVD Exploit-DB

CVE-2019-11021

EPSS 2% CVSS 7.2

HIGH This Week

PHP RCE File Upload +2

NVD VulDB