Vulnerabilities in SiberianCMS

5 results

Vexday analysis

SiberianCMS apresenta 5 vulnerabilidades catalogadas, com 1 classificada como crítica, porém nenhuma sob exploração ativa conhecida. A fraqueza dominante é injeção SQL (CWE-89), risco clássico e bem documentado. Não há novas vulnerabilidades nos últimos 90 dias, indicando situação de risco estável.

CVE-2023-39377HIGH SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified methodEPSS 0.8%CVE-2023-39378HIGH SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated userEPSS 0.7%CVE-2023-39375HIGHSiberianCMS - CWE-274: Improper Handling of Insufficient PrivilegesEPSS 0.6%CVE-2024-41702CRITICALSiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')EPSS 0.5%CVE-2023-39376MEDIUMSiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the networkEPSS 0.4%