Browse CVEs

HIGH 7.2 CVE-2022-44036 In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execu… B2evolution Cms No fix yet Fix from $1,9502023-01-03 CRITICAL 9.8 CVE-2021-31632 b2evolution CMS v7.2.3 was discovered to contain a SQL injection vulnerability via the parameter cfqueryparam in the User login section. This vulnera… B2evolution Cms No fix yet Fix from $2,3002021-12-06 HIGH 8.8 CVE-2021-31631 b2evolution CMS v7.2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the User login page. This vulnerability allows attackers to … B2evolution Cms No fix yet Fix from $1,9502021-12-06 MEDIUM 6.1 CVE-2020-22839 Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject … B2evolution Cms No fix yet Fix from $1,6002021-02-09 MEDIUM 6.5 CVE-2012-5910 SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via … B2evolution Mitigation only Fix from $1,6002012-11-17 MEDIUM 5.0 CVE-2011-3709 b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in… B2evolution No fix yet Fix from $1,6002011-09-23 HIGH 7.5 CVE-2007-2681 Directory traversal vulnerability in blogs/index.php in b2evolution 1.6 allows remote attackers to include and execute arbitrary local files via a ..… B2evolution Mitigation only Fix from $1,9502007-05-15 HIGH 7.5 CVE-2007-2358 Multiple PHP remote file inclusion vulnerabilities in b2evolution allow remote attackers to execute arbitrary PHP code via a URL in the (1) inc_path … B2evolution Mitigation only Fix from $1,9502007-04-30 HIGH 7.5 CVE-2006-6417 PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers to execute … B2evolution No fix yet Fix from $1,9502006-12-10 MEDIUM 6.8 CVE-2006-6197 Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web script or HT… B2evolution No fix yet Fix from $1,6002006-12-01