aikcms vulnerabilities and fixes

Recent CVEs affecting aikcms, with upgrade or downgrade steps. 3 tracked.

aikcms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-08-12. Highest priority: CVE-2020-18462 (score 46/100).

• CVE-2020-18464 LOW 3.5 DOWNGRADE Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which can let a malicious u
• CVE-2020-18463 LOW 2.4 DOWNGRADE Cross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php, which can let a malicious
• CVE-2020-18462 HIGH 7.2 DOWNGRADE File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office doe

FAQ

How do I fix aikcms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is aikcms being exploited right now?

None of the tracked aikcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which aikcms CVE should I patch first?

CVE-2020-18462 currently ranks highest (46/100): File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office doe.

RSS feed for aikcms · ← Back to latest CVEs