Damicms

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 11
    Known Exploited: 0
    1
    Critical Level Threats
    7
    High Level Threats
    2
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2020-21236

    A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie.

    Last Modified: Nov 21, 2024
    Published: Dec 27, 2021

    CVE-2020-18458

    Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.

    Last Modified: Nov 21, 2024
    Published: Aug 12, 2021

    CVE-2020-18451

    Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.

    Last Modified: Nov 21, 2024
    Published: Aug 12, 2021

    CVE-2018-14831

    An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI.

    Last Modified: Nov 21, 2024
    Published: Jul 10, 2019

    CVE-2018-20571

    DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.\Public\Config\config.ini.php to read the global configuration file.

    Last Modified: Nov 21, 2024
    Published: Dec 28, 2018
    Items Per Page
    Damicms Vulnerabilities & Security CVEs | CVE-DB