leadscloud/EmpireCMS

leadscloud/EmpireCMS

Releases2

Frequency

Last Release almost 12 years ago

Stars6

帝国CMS

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-50073 ↗	Dec 14, 2023Thursday, 14 December 2023, 15:15	9.8 CRITICAL	—
EmpireCMS v7.5 was discovered to contain a SQL injection vulnerability via the ftppassword parameter at SetEnews.php.
CVE-2022-28585 ↗	May 3, 2022Tuesday, 3 May 2022, 18:15	9.8 CRITICAL	7.5 HIGH
EmpireCMS 7.5 has a SQL injection vulnerability in AdClass.php
CVE-2020-22937 ↗	Aug 17, 2021Tuesday, 17 August 2021, 19:15	9.8 CRITICAL	7.5 HIGH
A remote code execution (RCE) in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file.
CVE-2018-16339 ↗	Sep 2, 2018Sunday, 2 September 2018, 18:29	—	6.8 MEDIUM
An issue was discovered in EmpireCMS 7.0. There is a CSRF vulnerability that can add administrators via upload/e/admin/user/AddUser.php?enews=AddUser.