Easycms vulnerabilities

Products

• Easycms 12

Newest

• easycms EasyCMS Request Parameter RbacuserAction.class.php sql injection CVE-2026-3786 Public exploit 5.3 MediumMarch 8, 2026
• easycms EasyCMS Request Parameter RbacnodeAction.class.php sql injection CVE-2026-3785 5.3 MediumMarch 8, 2026
• easycms EasyCMS UserAction.class.php sql injection CVE-2026-1105 6.9 MediumJanuary 17, 2026
• easycms EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search... CVE-2022-23358 9.8 CriticalFebruary 16, 2022
• easycms A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index... CVE-2020-24271 8.8 HighFebruary 1, 2021
• easycms An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert... CVE-2019-6294 8.8 HighJanuary 15, 2019
• easycms App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS... CVE-2018-17113 6.1 MediumSeptember 17, 2018
• easycms EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType... CVE-2018-16773 4.8 MediumSeptember 10, 2018
• easycms The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action... CVE-2018-16759 6.1 MediumSeptember 9, 2018
• easycms An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin... CVE-2018-16345 8.8 HighSeptember 2, 2018
• easycms EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users. CVE-2018-12971 6.5 MediumJune 29, 2018
• easycms EasyCMS 1.3 has XSS via the s POST parameter (aka a search box value) in an index.php?s=/index... CVE-2018-10374 6.1 MediumApril 25, 2018