Skip to content
OpenAdvisories

Vendor

SiberianCMS

5 known vulnerabilities.

3 results · Clear filters · Feed

  • High 8.8

    SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user

    SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user

  • High 7.2

    SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

    SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

  • High 7.5

    SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges

    SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges