Browse CVEs

HIGH 8.8 CVE-2026-3785 A vulnerability was identified in EasyCMS up to 1.6. The affected element is an unknown function of the file /RbacnodeAction.class.php of the compone… Easycms after 1.6 Fix from $1,9502026-03-08 HIGH 8.8 CVE-2026-3786 A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the co… Easycms after 1.6 Fix from $1,9502026-03-08 CRITICAL 9.8 CVE-2026-1105 A vulnerability was identified in EasyCMS up to 1.6. This vulnerability affects unknown code of the file /UserAction.class.php. Such manipulation of … Easycms after 1.6 Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2022-23358 EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were … Easycms No fix yet Fix from $2,3002022-02-16 HIGH 8.8 CVE-2020-24271 A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callba… Easycms No fix yet Fix from $1,9502021-02-01 HIGH 8.8 CVE-2019-6294 An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI. Easycms No fix yet Fix from $1,9502019-01-15 MEDIUM 6.1 CVE-2018-17113 App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related… Easycms No fix yet Fix from $1,6002018-09-17 MEDIUM 6.1 CVE-2018-16759 The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS via an onhas… Easycms No fix yet Fix from $1,6002018-09-09 HIGH 8.8 CVE-2018-16345 An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/update/navTa… Easycms No fix yet Fix from $1,9502018-09-02 MEDIUM 6.5 CVE-2018-12971 EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users. Easycms No fix yet Fix from $1,6002018-06-29 MEDIUM 6.1 CVE-2018-10374 EasyCMS 1.3 has XSS via the s POST parameter (aka a search box value) in an index.php?s=/index/search/index.html request. Easycms No fix yet Fix from $1,6002018-04-25