Known Vulnerabilities for products from Victor Cms Project
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Victor Cms Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-28060 json | SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php. | 7.5 - HIGH | 2022-04-28 | 2022-05-06 |
| CVE-2022-27478 json | Victor v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component admin/profile.php?section... | 8.8 - HIGH | 2022-04-21 | 2022-04-29 |
| CVE-2022-26201 json | Victor CMS v1.0 was discovered to contain a SQL injection vulnerability. | 9.8 - CRITICAL | 2022-03-04 | 2022-03-10 |
| CVE-2022-23873 json | Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands vi... | 8.8 - HIGH | 2022-02-03 | 2022-02-08 |
| CVE-2021-46459 json | Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_... | 7.5 - HIGH | 2022-01-31 | 2022-02-04 |
| CVE-2021-46458 json | Victor CMS v1.0 was discovered to contain a SQL injection vulnerability in the component admin/posts.php?source=add_post. Thi... | 7.5 - HIGH | 2022-01-31 | 2022-02-19 |
| CVE-2021-25203 json | Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CM... | 9.8 - CRITICAL | 2021-07-23 | 2021-07-29 |
| CVE-2020-35597 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2022-06-16 | 2022-06-27 |
| CVE-2020-29280 json | The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page. | 9.8 - CRITICAL | 2020-12-02 | 2020-12-03 |
| CVE-2020-23966 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2023-05-08 | 2023-05-12 |
| CVE-2020-23945 json | A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can ... | 7.5 - HIGH | 2020-10-27 | 2020-10-27 |
| CVE-2020-15599 json | Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field. | 6.1 - MEDIUM | 2020-07-07 | 2020-07-09 |
| CVE-2018-16775 json | An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu. | 4.8 - MEDIUM | 2018-09-10 | 2018-11-09 |
| CVE-2018-15603 json | An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen. | 6.1 - MEDIUM | 2018-08-21 | 2018-10-19 |
Known software with vulnerabilities from Victor Cms Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Victor Cms Project | Victor Cms | 1.0 |