Cuppacms vulnerabilities

Products

• Cuppacms 25

Newest

• cuppacms SQL Injection vulnerability in components/table_manager/html/edit_admin_table.php in CuppaCMS V1... CVE-2023-47990 9.8 CriticalDecember 20, 2023
• cuppacms Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the... CVE-2023-39681 9.8 CriticalSeptember 5, 2023
• cuppacms Session fixation vulnerability in CuppaCMS thru commit 4c9b742b23b924cf4c1f943f48b278e06a17e297... CVE-2021-29368 8.8 HighJanuary 20, 2023
• cuppacms The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user... CVE-2022-37191 6.5 MediumSeptember 13, 2022
• cuppacms CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both... CVE-2022-37190 EPSS 45.8% 8.8 HighSeptember 13, 2022
• cuppacms Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File... CVE-2022-38296 9.8 CriticalSeptember 12, 2022
• cuppacms Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager... CVE-2022-38295 6.1 MediumSeptember 12, 2022
• cuppacms Cuppa CMS v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the... CVE-2022-34121 7.5 HighJuly 27, 2022
• cuppacms CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts... CVE-2022-27985 9.8 CriticalApril 26, 2022
• cuppacms CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter... CVE-2022-27984 9.8 CriticalApril 26, 2022
• cuppacms CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts... CVE-2022-25485 7.8 HighMarch 15, 2022
• cuppacms CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts... CVE-2022-25486 7.8 HighMarch 15, 2022
• cuppacms The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to... CVE-2022-25495 9.8 CriticalMarch 15, 2022
• cuppacms CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function. CVE-2022-25497 5.3 MediumMarch 15, 2022
• cuppacms CuppaCMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the... CVE-2022-25498 9.8 CriticalMarch 15, 2022
• cuppacms The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the... CVE-2022-25401 7.5 HighFebruary 23, 2022
• cuppacms Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink(... CVE-2022-24647 8.1 HighFebruary 10, 2022
• cuppacms Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator... CVE-2022-24266 7.5 HighJanuary 31, 2022
• cuppacms Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator... CVE-2022-24265 7.5 HighJanuary 31, 2022
• cuppacms Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator... CVE-2022-24264 7.5 HighJanuary 31, 2022
• cuppacms An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers... CVE-2021-3376 8.8 HighDecember 14, 2021
• cuppacms The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload... CVE-2020-26048 8.8 HighOctober 5, 2020
• cuppacms CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view... CVE-2018-19918 5.4 MediumDecember 31, 2018
• cuppacms CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the... CVE-2018-19559 9.8 CriticalNovember 26, 2018
• cuppacms Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table_manager... CVE-2018-17300 4.8 MediumSeptember 21, 2018