source-trace/beescms

source-trace/beescms

Releases0

Stars27

PHP+MYSQL，多语言系统，内容模块易扩展，模板风格多样化，模板制作简单功能强大，专业SEO优化，后台操作方便，完全可以满足企业网站、外贸网站、事业单位、教育机构、个人网站使用。

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-22334 ↗	May 8, 2023Monday, 8 May 2023, 14:15	6.5 MEDIUM	—
Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/admin_admin.php.
CVE-2020-23572 ↗	Nov 8, 2021Monday, 8 November 2021, 21:15	8.8 HIGH	6.8 MEDIUM
BEESCMS v4.0 was discovered to contain an arbitrary file upload vulnerability via the component /admin/upload.php. This vulnerability allows attackers to execute arbitrary code via a crafted image file.
CVE-2019-8347 ↗	Feb 15, 2019Friday, 15 February 2019, 15:29	—	6.8 MEDIUM
BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=user URI.
CVE-2018-10266 ↗	Apr 22, 2018Sunday, 22 April 2018, 01:29	—	6.8 MEDIUM
BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI.