Filtered by vendor Dhcms Project Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-9550 1 Dhcms Project 1 Dhcms 2024-09-16 N/A
DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.
CVE-2020-19275 1 Dhcms Project 1 Dhcms 2024-08-04 5.3 Medium
An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes an error that will leak the physical path.
CVE-2020-19274 1 Dhcms Project 1 Dhcms 2024-08-04 6.1 Medium
A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious user execute arbitrary code.
CVE-2022-28527 1 Dhcms Project 1 Dhcms 2024-08-03 8.1 High
dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del.