Skip to content
OpenAdvisories

Package · PyPI

lin-cms

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.6
    CVE-2022-44244

    Lin CMS vulnerable to Improper Authentication

    An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.

    lin-cms io.github.talelin:lin-cms-core Maven PyPI
  • Unscored —
    CVE-2020-18701

    Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain pr…

    lin-cms PyPI
  • Medium 6.1
    CVE-2020-18699

    Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability

    Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'.

    lin-cms PyPI
  • Critical 9.8
    CVE-2020-18698

    Lin-CMS-Flask vulnerable to Improper Authentication

    Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.

    lin-cms PyPI