Phpwcms vulnerabilities

Products

• Phpwcms 20

Newest

• phpwcms slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload CVE-2026-110025 Public exploit 6.9 MediumOctober 13, 2026
• phpwcms Phpwcms 1.9.30 - Arbitrary File Upload CVE-2021-47783 5.3 MediumJanuary 15, 2026
• phpwcms slackero phpwcms image_resized.php getimagesize deserialization CVE-2025-5499 6.9 MediumJune 3, 2025
• phpwcms slackero phpwcms Custom Source Tab cnt21.readform.inc.php is_file deserialization CVE-2025-5498 5.1 MediumJune 3, 2025
• phpwcms slackero phpwcms Feedimport processing.inc.php deserialization CVE-2025-5497 5.3 MediumJune 3, 2025
• phpwcms File Upload vulnerability in phpwcms 1.9.25 allows remote attackers to run arbitrary code via... CVE-2021-36426 8.8 HighFebruary 3, 2023
• phpwcms Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary... CVE-2021-36425 5.4 MediumFebruary 3, 2023
• phpwcms An issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user... CVE-2021-36424 9.8 CriticalFebruary 3, 2023
• phpwcms slackero phpwcms sql injection CVE-2021-4301 6.3 MediumJanuary 7, 2023
• phpwcms slackero phpwcms SVG File cross site scripting CVE-2021-4302 3.5 LowJanuary 4, 2023
• phpwcms phpwcms v1.9 contains a cross-site scripting (XSS) vulnerability in /image_zoom.php. CVE-2020-19855 6.1 MediumSeptember 7, 2021
• phpwcms phpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php. CVE-2020-21784 9.8 CriticalJune 24, 2021
• phpwcms phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid... CVE-2018-12990 5.3 MediumJune 30, 2018
• phpwcms phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin... CVE-2017-15872 4.8 MediumOctober 24, 2017
• phpwcms phpwcms 1.4.7 r412 allows remote attackers to obtain sensitive information via a direct request... CVE-2011-3789 5.0 MediumSeptember 24, 2011
• phpwcms phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary... CVE-2006-7019 7.5 HighFebruary 15, 2007
• phpwcms phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request... CVE-2006-6886 5.0 MediumDecember 31, 2006
• phpwcms Directory traversal vulnerability in include/inc_ext/spaw/spaw_control.class.php in phpwcms 1.2.5... CVE-2006-2519 2.6 LowMay 22, 2006
• phpwcms Cross-site scripting (XSS) vulnerability in phpwcms 1.2.5-DEV allows remote attackers to inject... CVE-2006-2518 2.6 LowMay 22, 2006
• phpwcms Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read... CVE-2005-3789 Public exploit 5.0 MediumNovember 24, 2005