Browse CVEs

CRITICAL 9.8 CVE-2021-31707 Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type. Kitecms Mitigation only Fix from $2,3002023-04-04 HIGH 7.2 CVE-2021-3267 File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function. Kitecms No fix yet Fix from $1,9502023-04-04 MEDIUM 6.1 CVE-2020-20521 Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter. Kitecms No fix yet Fix from $1,6002023-04-04 MEDIUM 6.1 CVE-2020-20522 Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter. Kitecms No fix yet Fix from $1,6002023-04-04 HIGH 7.5 CVE-2021-36546 Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL. Kitecms No fix yet Fix from $1,9502023-02-03 MEDIUM 6.5 CVE-2022-28445 KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module. Kitecms No fix yet Fix from $1,6002022-04-21 HIGH 8.8 CVE-2020-20671 A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account. Kitecms No fix yet Fix from $1,9502021-09-13 HIGH 7.8 CVE-2020-20672 An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file. Kitecms No fix yet Fix from $1,9502021-09-13 MEDIUM 6.5 CVE-2021-31731 A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/adm… Kitecms No fix yet Fix from $1,6002021-08-12