SiberianCMS vulnerabilities
5 published CVEs name SiberianCMS among the affected products.
- 5Published CVEs5 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-41702
SiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
SiberianCMS · SiberianCMS v5.0.8
Critical9.8 - CVE-2023-39378
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user
SiberianCMS · SiberianCMS
High8.8 - CVE-2023-39377
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method
SiberianCMS · SiberianCMS
High7.2 - CVE-2023-39376
SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network
SiberianCMS · SiberianCMS
Medium6.5 - CVE-2023-39375
SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges
SiberianCMS · SiberianCMS
High7.5