CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 02/11/2023 |
| CVE-2022-47766 | 高8.8 | PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability. | 19/01/2023 |
| CVE-2021-28070 | 中4.3 | Cross Site Request Forgery (CSRF) vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete. | 25/08/2021 |
| CVE-2020-19547 | 中6.5 | Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php. | 25/08/2021 |
| CVE-2020-18065 | 中5.4 | Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu. | 25/08/2021 |
| CVE-2020-21357 | 中6.1 | A stored cross site scripting (XSS) vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field. | 06/08/2021 |
| CVE-2020-21356 | 中5.3 | An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads. | 06/08/2021 |
| CVE-2019-18816 | 中6.1 | po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS. | 07/11/2019 |
| CVE-2019-18815 | 中6.1 | PopojiCMS 2.0.1 allows refer= Open Redirection. | 07/11/2019 |
| CVE-2019-9549 | 高8.8 | An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935. | 03/03/2019 |
| CVE-2018-18936 | 高7.5 | An issue was discovered in PopojiCMS v2.0.1. admin_library.php allows remote attackers to delete arbitrary files via directory traversal in the po-admin/route.php?mod=library&act=delete id parameter. | 05/11/2018 |
| CVE-2018-18935 | 高8.8 | An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as demonstrated by adding a level=1 account. | 05/11/2018 |
| CVE-2018-18934 | 緊急9.8 | An issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload parameter to upload a ZIP file containing arbitrary PHP code (that is extracted and can be executed). This can also be exploited via CSRF. | 05/11/2018 |