Razorcms vulnerabilities

Products

• Razorcms 15

Newest

• razorcms Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter. CVE-2018-19906 5.4 MediumDecember 31, 2018
• razorcms HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter. CVE-2018-19905 5.4 MediumDecember 31, 2018
• razorcms rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user. CVE-2018-17986 8.8 HighOctober 5, 2018
• razorcms razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component. CVE-2018-16727 5.4 MediumSeptember 12, 2018
• razorcms razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings... CVE-2018-16726 5.4 MediumSeptember 12, 2018
• razorcms admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain... CVE-2012-6038 Public exploit 6.5 MediumNovember 26, 2012
• razorcms razorCMS 1.2 allows remote authenticated users to access administrator directories and files by... CVE-2012-5918 Public exploit 4.0 MediumNovember 19, 2012
• razorcms Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier... CVE-2012-1900 Public exploit 6.8 MediumOctober 22, 2012
• razorcms Cross-site scripting (XSS) vulnerability in admin/core/admin_func.php in razorCMS 1.0 stable... CVE-2010-5051 Public exploit 4.3 MediumNovember 23, 2011
• razorcms Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject... CVE-2009-1463 7.5 HighApril 28, 2009
• razorcms The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned... CVE-2009-1462 7.2 HighApril 28, 2009
• razorcms Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and... CVE-2009-1461 3.5 LowApril 28, 2009
• razorcms razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local... CVE-2009-1460 4.6 MediumApril 28, 2009
• razorcms Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to... CVE-2009-1459 6.8 MediumApril 28, 2009
• razorcms Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4... CVE-2009-1458 Public exploit 4.3 MediumApril 28, 2009