ZeroHour

Vulnerabilities

6 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2021-45380
AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php

AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php

NVD description · AI analysis pending
6.13% PoC
  • appcms appcms
CVE-2020-36006
+3 in the same advisory: …36005 …36004 …36007
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.

NVD description · AI analysis pending
6.5
group max
1% PoC
  • appcms appcms
CVE-2019-9595
AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.

AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.

NVD description · AI analysis pending
6.1<1% PoC
  • appcms appcms