CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 08/11/2024 |
| CVE-2022-43234 | KRITISCH9.8 | An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file. | 16/11/2022 |
| CVE-2022-28586 | MITTEL6.1 | XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars. | 25/04/2022 |
| CVE-2021-43478 | MITTEL5.4 | A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website. | 31/03/2022 |
| CVE-2020-26043 | MITTEL6.1 | An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php | 30/09/2020 |
| CVE-2020-26042 | KRITISCH9.8 | An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php | 30/09/2020 |
| CVE-2020-26041 | KRITISCH9.8 | An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php | 30/09/2020 |
| CVE-2020-16610 | MITTEL4.3 | Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention. | 28/08/2020 |
| CVE-2018-16772 | MITTEL4.8 | Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new. | 10/09/2018 |
| CVE-2018-16771 | KRITISCH9.8 | Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php. | 10/09/2018 |
| CVE-2018-7590 | HOCH8.8 | CSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation. | 01/03/2018 |