Phome Empirecms vulnerabilities

• empiresoft empirecms EmpireSoft EmpireCMS connect.php CheckSaveTranFiletype unrestricted upload CVE-2025-15423 5.3 MediumJanuary 2, 2026
• empiresoft empirecms EmpireSoft EmpireCMS IP Address connect.php egetip protection mechanism CVE-2025-15422 6.9 MediumJanuary 2, 2026
• phome empirecms SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code... CVE-2023-50162 7.2 HighJanuary 8, 2024
• phome empirecms EmpireCMS 7.5 has a SQL injection vulnerability in AdClass.php CVE-2022-28585 9.8 CriticalMay 3, 2022
• phome empirecms A remote code execution (RCE) in e/install/index.php of EmpireCMS 7.5 allows attackers to execute... CVE-2020-22937 9.8 CriticalAugust 17, 2021
• phome empirecms admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php. CVE-2018-19461 4.8 MediumJune 7, 2019
• phome empirecms admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code... CVE-2018-19462 7.2 HighJune 7, 2019
• phome empirecms EmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php. CVE-2019-12362 6.1 MediumMay 27, 2019
• phome empirecms EmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a... CVE-2019-12361 6.1 MediumMay 27, 2019
• phome empirecms EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user... CVE-2018-18449 8.8 HighMarch 7, 2019
• phome empirecms Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in... CVE-2018-20300 9.8 CriticalDecember 20, 2018
• phome empirecms EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory... CVE-2018-18869 9.8 CriticalOctober 31, 2018
• phome empirecms EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class... CVE-2018-18086 8.8 HighOctober 9, 2018
• phome empirecms An issue was discovered in EmpireCMS 7.0. There is a CSRF vulnerability that can add... CVE-2018-16339 8.8 HighSeptember 2, 2018
• phome empirecms, dedecms +1 more EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a... CVE-2018-6881 5.3 MediumFebruary 12, 2018
• phome empirecms EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value... CVE-2018-6880 5.3 MediumFebruary 12, 2018
• phome empirecms Eval injection vulnerability in the ReplaceListVars function in the template parser in e/class... CVE-2012-5777 6.8 MediumNovember 16, 2012