Browse CVEs

HIGH 7.2 CVE-2023-53883 Webedition CMS v2.9.8.8 contains a remote code execution vulnerability that allows authenticated attackers to inject system commands through PHP page… Webedition Cms No fix yet Fix from $1,9502025-12-15 MEDIUM 5.4 CVE-2023-53884 Webedition CMS v2.9.8.8 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embed… Webedition Cms No fix yet Fix from $1,6002025-12-15 MEDIUM 6.5 CVE-2024-28418 Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php Webedition Cms No fix yet Fix from $1,6002024-03-14 MEDIUM 6.3 CVE-2024-28417 Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/we_cmd.php. Webedition Cms No fix yet Fix from $1,6002024-03-14 CRITICAL 9.8 CVE-2014-2302 The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection attacks by i… Webedition Cms 6.2.7.0 / 6.3.8+ Fix from $2,3002018-07-19 HIGH 7.5 CVE-2014-2303 Multiple SQL injection vulnerabilities in the file browser component (we_fs.php) in webEdition CMS before 6.2.7-s1.2 and 6.3.x through 6.3.8 before -… Webedition Cms No fix yet Fix from $1,9502014-06-13 MEDIUM 5.1 CVE-2009-1222 Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, … Webedition No fix yet Fix from $1,6002009-04-02