Vulnerabilities > Articlecms Project

DATE CVE VULNERABILITY TITLE RISK
2021-05-13 CVE-2020-20092 Unrestricted Upload of File with Dangerous Type vulnerability in Articlecms Project Articlecms 1.0
File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after the JPEG data, which could let a remote malicious user execute arbitrary PHP code.
network
low complexity
articlecms-project CWE-434
critical
 9.8
9.8
2021-05-13 CVE-2020-28063 Unrestricted Upload of File with Dangerous Type vulnerability in Articlecms Project Articlecms
A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.
network
low complexity
articlecms-project CWE-434
critical
 9.8
9.8
2018-11-23 CVE-2018-19469 Cross-site Scripting vulnerability in Articlecms Project Articlecms 1.0/20170219
ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.
network
low complexity
articlecms-project CWE-79
6.1
6.1
2018-06-13 CVE-2018-12339 Cross-site Scripting vulnerability in Articlecms Project Articlecms 1.0/20170219
ArticleCMS through 2017-02-19 has XSS via an "add an article" action.
network
low complexity
articlecms-project CWE-79
5.4
5.4