Browse CVEs

MEDIUM 5.4 CVE-2020-36763 Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when … Duxcms No fix yet Fix from $1,6002023-07-31 MEDIUM 6.5 CVE-2020-21881 Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/cont… Duxcms No fix yet Fix from $1,6002023-07-31 HIGH 8.8 CVE-2020-21861 File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload. Duxcms No fix yet Fix from $1,9502023-07-06 HIGH 8.1 CVE-2020-21862 Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del. Duxcms No fix yet Fix from $1,9502023-07-06 HIGH 8.0 CVE-2020-36610 A vulnerability was found in annyshow DuxCMS 2.1. It has been declared as problematic. This vulnerability affects unknown code. The manipulation lead… Duxcms No fix yet Fix from $1,9502022-12-08 MEDIUM 5.4 CVE-2020-36609 A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article… Duxcms No fix yet Fix from $1,6002022-12-08 CRITICAL 9.8 CVE-2021-3242 DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=. Duxcms No fix yet Fix from $2,3002022-02-16