Skip to content
OpenAdvisories

Product · inunosinsi

soycms

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2024-28187

    OS Command Injection Vulnerability in SOY CMS

    SOY CMS is an open source CMS (content management system) that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrato…

    inunosinsi soycms
  • High 8.4
    CVE-2020-15183

    Reflected XSS leading to RCE in SoyCMS

    SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) from a known vulnerability. This allows remote attackers to force the administrator to edit files once the adminsitrator loads a specially …

    inunosinsi soycms
  • High 8.4
    CVE-2020-15182

    Cross-site Request Forgery leading to RCE in SOY CMS

    The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files…

    inunosinsi soycms