Vulnerabilities > Rgcms Project

DATE CVE VULNERABILITY TITLE RISK
2021-09-15 CVE-2020-21480 Unspecified vulnerability in Rgcms Project Rgcms 1.06
An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file.
network
low complexity
rgcms-project
6.5
2021-09-15 CVE-2020-21481 Unrestricted Upload of File with Dangerous Type vulnerability in Rgcms Project Rgcms 1.06
An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file.
network
low complexity
rgcms-project CWE-434
6.5
2021-09-15 CVE-2020-21482 Cross-site Scripting vulnerability in Rgcms Project Rgcms 1.06
A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the administrator's cookie via a crafted payload in the Name field under the Message Board module
3.5