Known Vulnerabilities for Nc-cms by Nconsulting
Listed below are 4 of the newest known vulnerabilities associated with "Nc-cms" by "Nconsulting".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-7721 json | lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters. | 7.5 - HIGH | 2019-02-11 | 2019-02-11 |
| CVE-2018-18874 json | nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with ... | 9.8 - CRITICAL | 2018-10-31 | 2018-12-10 |
| CVE-2018-18361 json | An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html allows XSS via the name parameter, as demons... | 6.1 - MEDIUM | 2018-10-15 | 2018-12-03 |
| CVE-2018-18290 json | ** DISPUTED ** An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html&name=home_content allows XSS ... | 4.8 - MEDIUM | 2018-10-14 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Nconsulting | Nc-cms | 3.5 | |||
| Application | Nconsulting | Nc-cms | 3.4 | |||
| Application | Nconsulting | Nc-cms | 3.2.1 | |||
| Application | Nconsulting | Nc-cms | 3.2.0 | |||
| Application | Nconsulting | Nc-cms | 3.1.0 |