Browse CVEs

HIGH 8.2 CVE-2020-37076 Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database… Victor Cms No fix yet Fix from $1,9502026-02-03 HIGH 8.8 CVE-2020-37073 Victor CMS 1.0 contains an authenticated file upload vulnerability that allows administrators to upload PHP files with arbitrary content through the … Victor Cms No fix yet Fix from $1,9502026-02-03 MEDIUM 6.1 CVE-2020-37072 Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows attackers to inject malicious … Victor Cms No fix yet Fix from $1,6002026-02-03 HIGH 8.8 CVE-2020-36942 Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload fe… Victor Cms No fix yet Fix from $1,9502026-01-27 CRITICAL 9.8 CVE-2020-23966 SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET req… Victor Cms No fix yet Fix from $2,3002023-05-08 HIGH 8.8 CVE-2020-35597 Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of … Victor Cms No fix yet Fix from $1,9502022-06-16 HIGH 7.5 CVE-2022-28060 SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php. Victor Cms No fix yet Fix from $1,9502022-04-28 HIGH 8.8 CVE-2022-27478EPSS 20% Victor v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component admin/profile.php?section=admin. Victor Cms No fix yet Fix from $1,9502022-04-21 CRITICAL 9.8 CVE-2022-26201 Victor CMS v1.0 was discovered to contain a SQL injection vulnerability. Victor Cms No fix yet Fix from $2,3002022-03-04 HIGH 8.8 CVE-2022-23873 Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'user_firstname' param… Victor Cms No fix yet Fix from $1,9502022-02-03 HIGH 7.5 CVE-2021-46459 Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilit… Victor Cms No fix yet Fix from $1,9502022-01-31 HIGH 7.5 CVE-2021-46458 Victor CMS v1.0 was discovered to contain a SQL injection vulnerability in the component admin/posts.php?source=add_post. This vulnerability can be e… Victor Cms No fix yet Fix from $1,9502022-01-31 CRITICAL 9.8 CVE-2021-25203 Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CMSsite-master\admin\inclu… Victor Cms No fix yet Fix from $2,3002021-07-23 CRITICAL 9.8 CVE-2020-29280 The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page. Victor Cms No fix yet Fix from $2,3002020-12-02 HIGH 7.5 CVE-2020-23945 A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obt… Victor Cms No fix yet Fix from $1,9502020-10-27