Browse CVEs

HIGH 7.2 CVE-2024-58284 PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code throug… Popojicms No fix yet Fix from $1,9502025-12-10 HIGH 7.2 CVE-2023-50011 PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field. Popojicms No fix yet Fix from $1,9502023-12-14 MEDIUM 6.1 CVE-2023-5910 A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing of the file install.php of the… Popojicms Mitigation only Fix from $1,6002023-11-02 HIGH 8.8 CVE-2022-47766 PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability. Popojicms No fix yet Fix from $1,9502023-01-19 MEDIUM 6.5 CVE-2020-19547 Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php. Popojicms No fix yet Fix from $1,6002021-08-25 MEDIUM 5.4 CVE-2020-18065 Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu. Popojicms No fix yet Fix from $1,6002021-08-25 MEDIUM 6.1 CVE-2020-21357 A stored cross site scripting (XSS) vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web script… Popojicms No fix yet Fix from $1,6002021-08-06 MEDIUM 5.3 CVE-2020-21356 An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted d… Popojicms No fix yet Fix from $1,6002021-08-06 MEDIUM 6.1 CVE-2019-18815 PopojiCMS 2.0.1 allows refer= Open Redirection. Popojicms No fix yet Fix from $1,6002019-11-07 MEDIUM 6.1 CVE-2019-18816 po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS. Popojicms No fix yet Fix from $1,6002019-11-07 HIGH 8.8 CVE-2019-9549 An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 acco… Popojicms No fix yet Fix from $1,9502019-03-03 CRITICAL 9.8 CVE-2018-18934 An issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the … Popojicms No fix yet Fix from $2,3002018-11-05 HIGH 8.8 CVE-2018-18935 An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as demonstrated by adding a level=1… Popojicms No fix yet Fix from $1,9502018-11-05 HIGH 7.5 CVE-2018-18936 An issue was discovered in PopojiCMS v2.0.1. admin_library.php allows remote attackers to delete arbitrary files via directory traversal in the po-ad… Popojicms No fix yet Fix from $1,9502018-11-05