kitesky/KiteCMS

kitesky/KiteCMS

www.kitesky.com

Releases1

Frequency

Last Release almost 7 years ago

Stars41

KiteCMS系统基于Thinkphp 5.1.37 版本开发，真正的开源免费，可以用于商业目的，无需任何授权。后续会不断的完善优化系统，开发更多实用的模块，插件，模板。官方QQ群：3337800 。后台管理演示地址： http://test.19981.com/admin 账号密码 admin/admin

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-31707 ↗	Apr 4, 2023Tuesday, 4 April 2023, 15:15	9.8 CRITICAL	—
Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type.
CVE-2021-3267 ↗	Apr 4, 2023Tuesday, 4 April 2023, 15:15	7.2 HIGH	—
File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function.
CVE-2020-20521 ↗	Apr 4, 2023Tuesday, 4 April 2023, 15:15	6.1 MEDIUM	—
Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter.
CVE-2020-20522 ↗	Apr 4, 2023Tuesday, 4 April 2023, 15:15	6.1 MEDIUM	—
Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter.
CVE-2021-36546 ↗	Feb 3, 2023Friday, 3 February 2023, 18:15	7.5 HIGH	—
Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.
CVE-2020-20671 ↗	Sep 13, 2021Monday, 13 September 2021, 22:15	8.8 HIGH	6.8 MEDIUM
A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
CVE-2020-20672 ↗	Sep 13, 2021Monday, 13 September 2021, 22:15	7.8 HIGH	6.8 MEDIUM
An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.
CVE-2021-31731 ↗	Aug 12, 2021Thursday, 12 August 2021, 22:15	6.5 MEDIUM	5.5 MEDIUM
A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter.