Skip to content
OpenAdvisories

Package · NuGet

SSCMS

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2021-42655

    SQL injection in SiteServer CMS

    SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

    SSCMS NuGet
  • High 7.2
    CVE-2019-11401

    SiteServer CMS RCE via unsafe file upload

    A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.

    SSCMS NuGet