Skip to contentSilverstripe vulnerabilities
Newest
- silverstripe, symbiote versionedfiles +1 moreSilverStripe Versioned Files module Unpublished files are exposed publiclyCVE-2019-16409Fix available5.3 Medium
- silverstripeSilverStripe Priviledge escalation through cache pollutionCVE-2019-12617Fix available2.7 Low
- silverstripeSilverStripe asset-admin Cross-site Scripting (XSS)CVE-2019-14272Fix available5.4 Medium
- silverstripeBroken access control on filesCVE-2019-14273Fix available5.3 Medium
- silverstripeSilverstripe Flash Clipboard Reflected XSSCVE-2019-12205Fix available6.1 Medium
- silverstripeSession fixation in change password formCVE-2019-12203Fix available6.3 Medium
- silverstripeLack of access control on upoaded filesCVE-2019-12245Fix available5.3 Medium
- silverstripeMissing warning can lead to unauthenticated admin access in SilverStripeCVE-2019-12204Fix available9.8 Critical
- silverstripe registry, restfulserver +1 moresilverstripe restfulserver and registry modules SQL injection vulnerabilityCVE-2019-12149Fix available9.8 Critical
- silverstripeSilverstripe Framework SQLi VulnerabilityCVE-2019-5715Fix available9.8 Critical
- silverstripeSilverStripe CSV Excel Macro InjectionCVE-2017-18049Fix available5.5 Medium
- silverstripeSilverstripe CMS User EnumerationCVE-2017-12849Fix available5.3 Medium
- silverstripeSilverstripe CMS XSS VulnerabilityCVE-2017-14498Fix available6.1 Medium
- silverstripeSilverstripe CMS XSS VulnerabilityCVE-2017-5197Fix available6.1 Medium
- silverstripeSilverstripe CMS XSS VulnerabilityCVE-2015-8606Fix available6.1 Medium
- silverstripeMultiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow...CVE-2015-50634.3 Medium
- silverstripeSilverstripe CMS Open RedirectCVE-2015-50625.8 Medium
- silverstripeCross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe...CVE-2011-4958Public exploit4.3 Medium
- silverstripesecurity/MemberLoginForm.php in SilverStripe 3.0.3 supports credentials in a GET request, which...CVE-2013-67895.0 Medium
- silverstripesecurity/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which...CVE-2013-2653Public exploit5.8 Medium
- silverstripeMultiple cross-site scripting (XSS) vulnerabilities in the SilverStripe e-commerce module 3.0 for...CVE-2012-64584.3 Medium
- silverstripeSilverstripe XSS VulnerabilitiesCVE-2012-4968Fix available4.3 Medium
- silverstripeSilverstripe CMS Arbitrary Code ExecutionCVE-2011-4962Fix available6.8 Medium
- silverstripeSilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with...CVE-2011-49616.0 Medium
- silverstripeSQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12...CVE-2011-49607.5 High
- silverstripeSQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4...CVE-2011-49596.8 Medium
- silverstripeSilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses weak entropy when generating tokens...CVE-2010-50795.0 Medium
- silverstripeSilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 stores sensitive information under the...CVE-2010-50785.0 Medium
- silverstripeSQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in...CVE-2010-48246.8 Medium
- silverstripeCross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control...CVE-2010-48234.3 Medium
- silverstripecore/model/MySQLDatabase.php in SilverStripe 2.4.x before 2.4.4, when the site is running in ...CVE-2010-48224.3 Medium
- silverstripeSilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the ...CVE-2010-51885.0 Medium
- silverstripeSilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain...CVE-2010-51874.3 Medium
- silverstripeCross-site scripting (XSS) vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote...CVE-2010-50954.3 Medium
- silverstripeThe deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3...CVE-2010-50945.0 Medium
- silverstripeMember_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote...CVE-2010-50935.0 Medium
- silverstripeThe Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in...CVE-2010-50921.9 Low
- silverstripeThe setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2...CVE-2010-50916.0 Medium
- silverstripeSilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via...CVE-2010-50904.0 Medium
- silverstripeSilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows...CVE-2010-50894.3 Medium
- silverstripeMultiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and...CVE-2010-50886.8 Medium
- silverstripeSilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the...CVE-2010-50875.0 Medium
- silverstripeThe Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4...CVE-2010-50806.8 Medium
- silverstripeCross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote...CVE-2012-09762.1 Low
- silverstripeSilverStripe vulnerable to Cross-site ScriptingCVE-2010-1593Fix available4.3 Medium
- silverstripeSQL injection vulnerability in SilverStripe before 2.2.2 allows remote attackers to execute...CVE-2008-67537.5 High
- silverstripeSQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1...CVE-2009-14337.5 High
- silverstripeUnspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact...CVE-2007-232110.0 High