8cms - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2023-06-20.

Products

• Ljcms - 4 CVEs

Newest CVEs of 8cms

• CVE-2020-20735 - CVSS 9.8 (critical), 2023-06-20: File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.php parameter.
• CVE-2020-21237 - CVSS 9.8 (critical), 2021-12-27: An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks.
• CVE-2020-20979 - CVSS 9.8 (critical), 2021-08-12: An arbitrary file upload vulnerability in the move_uploaded_file() function of LJCMS v4.3 allows attackers to execute arbitrary code.
• CVE-2020-20583 - CVSS 7.5 (high), 2021-07-08: A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information.