Vulnerabilities > Schoolcms
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-03-05 | CVE-2019-9572 | Unrestricted Upload of File with Dangerous Type vulnerability in Schoolcms 2.3.1 SchoolCMS version 2.3.1 allows file upload via the theme upload feature at admin.php?m=admin&c=theme&a=upload by using the .zip extension along with the _Static substring, changing the Content-Type to application/zip, and placing PHP code after the ZIP header. | 6.5 |
| 2019-02-26 | CVE-2019-9181 | Unrestricted Upload of File with Dangerous Type vulnerability in Schoolcms 2.3.1 SchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c=site&a=save by using the .jpg extension, changing the Content-Type to image/php, and placing PHP code after the JPEG data. | 6.5 |
| 2019-02-13 | CVE-2019-8335 | Cross-site Scripting vulnerability in Schoolcms 2.3.1 An issue was discovered in SchoolCMS 2.3.1. | 4.3 |
| 2019-02-13 | CVE-2019-8334 | Cross-site Scripting vulnerability in Schoolcms 2.3.1 An issue was discovered in SchoolCMS 2.3.1. | 4.3 |