Vulnerabilities
5 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2018-17361 | Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php because $_SERVER[' Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php because $_SERVER['PHP_SELF'] is mishandled. NVD description · AI analysis pending | 6.1 | <1% | PoC |
| — | |
| CVE-2018-16352 | There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used. NVD description · AI analysis pending | 9.8 | 1% | PoC |
| — | |
| CVE-2018-14959 +1 in the same advisory: …14958 | An issue was discovered in WeaselCMS v0.3.5. An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI. NVD description · AI analysis pending | 8.8 | <1% | PoC |
| — | |
| CVE-2018-14877 | An issue was discovered in WeaselCMS v0.3.5. An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page. NVD description · AI analysis pending | 5.4 | <1% | PoC |
| — |