Known Vulnerabilities for products from Cuppacms
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Cuppacms".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-39681 json | Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Con... | 9.8 - CRITICAL | 2023-09-05 | 2023-09-08 |
| CVE-2022-38296 json | Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager. | 9.8 - CRITICAL | 2022-09-12 | 2022-09-15 |
| CVE-2022-38295 json | Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vul... | 6.1 - MEDIUM | 2022-09-12 | 2022-09-15 |
| CVE-2022-37191 json | The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via cr... | 6.5 - MEDIUM | 2022-09-13 | 2022-09-17 |
| CVE-2022-37190 json | CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and func... | 8.8 - HIGH | 2022-09-13 | 2023-08-08 |
| CVE-2022-34121 json | Cuppa CMS v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the component /templates/default/html... | 7.5 - HIGH | 2022-07-27 | 2022-08-04 |
| CVE-2022-27985 json | CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php. | Not Provided | 2022-04-26 | 2026-07-09 |
| CVE-2022-27984 json | CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templat... | Not Provided | 2022-04-26 | 2026-07-09 |
| CVE-2022-25498 json | CuppaCMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the saveConfigData function in /class... | 9.8 - CRITICAL | 2022-03-15 | 2023-08-08 |
| CVE-2022-25497 json | CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function. | 5.3 - MEDIUM | 2022-03-15 | 2022-03-23 |
| CVE-2022-25495 json | The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execut... | 9.8 - CRITICAL | 2022-03-15 | 2022-03-23 |
| CVE-2022-25486 json | CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php. | 7.8 - HIGH | 2022-03-15 | 2022-10-27 |
| CVE-2022-25485 json | CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php. | 7.8 - HIGH | 2022-03-15 | 2022-03-23 |
| CVE-2022-25401 json | The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting attac... | 7.5 - HIGH | 2022-02-24 | 2022-03-03 |
| CVE-2022-24647 json | Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink() function. | 8.1 - HIGH | 2022-02-10 | 2022-02-17 |
| CVE-2022-24266 json | Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the or... | 7.5 - HIGH | 2022-01-31 | 2022-02-03 |
| CVE-2022-24265 json | Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=compon... | 7.5 - HIGH | 2022-01-31 | 2022-02-03 |
| CVE-2022-24264 json | Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the se... | 7.5 - HIGH | 2022-01-31 | 2022-02-03 |
| CVE-2021-29368 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2023-01-20 | 2023-02-06 |
| CVE-2021-3376 json | An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges ... | 8.8 - HIGH | 2021-12-14 | 2022-07-12 |
Known software with vulnerabilities from Cuppacms
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Cuppacms | Cuppacms | - |