Gxlcms vulnerabilities

Products

• Gxlcms 9
• Qy 6

Newest

• gxlcms In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename... CVE-2020-20975 9.8 CriticalAugust 12, 2021
• gxlcms In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[]... CVE-2018-18488 9.8 CriticalOctober 18, 2018
• gxlcms In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation... CVE-2018-18487 7.5 HighOctober 18, 2018
• gxlcms Gxlcms 1.0 has XSS via the PATH_INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php. CVE-2018-16655 6.1 MediumSeptember 7, 2018
• gxlcms Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator. CVE-2018-16437 4.9 MediumSeptember 5, 2018
• gxlcms Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator. CVE-2018-16436 7.2 HighSeptember 5, 2018
• gxlcms In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account. CVE-2018-15177 8.8 HighAugust 8, 2018
• gxlcms The add function in www/Lib/Lib/Action/Admin/TplAction.class.php in Gxlcms v1.1.4 allows remote... CVE-2018-14685 9.8 CriticalJuly 28, 2018
• gxlcms qy In Gxlcms QY v1.0.0713, Lib\Lib\Action\Home\HitsAction.class.php allows remote attackers to read... CVE-2018-9852 9.8 CriticalApril 8, 2018
• gxlcms qy In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to read... CVE-2018-9851 7.5 HighApril 8, 2018
• gxlcms qy In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\DataAction.class.php allows remote attackers to... CVE-2018-9850 7.5 HighApril 8, 2018
• gxlcms qy In Gxlcms QY v1.0.0713, the upload function in Lib\Lib\Action\Admin\UploadAction.class.php allows... CVE-2018-9848 9.8 CriticalApril 7, 2018
• gxlcms qy In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows... CVE-2018-9847 9.8 CriticalApril 7, 2018
• gxlcms qy The upsql function in \Lib\Lib\Action\Admin\DataAction.class.php in Gxlcms QY v1.0.0713 allows... CVE-2018-9247 9.8 CriticalApril 4, 2018
• gxlcms Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which... CVE-2017-14979 7.5 HighOctober 2, 2017