Browse CVEs

CRITICAL 9.8 CVE-2022-41497 ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php. Clippercms No fix yet Fix from $2,3002022-10-13 CRITICAL 9.8 CVE-2022-41495 ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php. Clippercms No fix yet Fix from $2,3002022-10-13 MEDIUM 5.4 CVE-2018-12101 CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields. Clippercms No fix yet Fix from $1,6002019-08-15 HIGH 7.2 CVE-2018-19424 ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files. Clippercms Mitigation only Fix from $1,9502018-11-21 HIGH 8.8 CVE-2018-19135 ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions f… Clippercms No fix yet Fix from $1,9502018-11-11 HIGH 8.8 CVE-2018-11571 ClipperCMS 1.3.3 allows Session Fixation. Clippercms Mitigation only Fix from $1,9502018-05-31 MEDIUM 5.4 CVE-2018-11572 ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -> Manage modules -> edit" action to the manager/ URI. Clippercms No fix yet Fix from $1,6002018-05-31