damicms vulnerabilities and fixes

Recent CVEs affecting damicms, with upgrade or downgrade steps. 3 tracked.

damicms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-12-27. Highest priority: CVE-2020-21236 (score 47/100).

• CVE-2020-21236 HIGH 8.8 DOWNGRADE A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise
• CVE-2020-18458 HIGH 8.0 DOWNGRADE Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via adm
• CVE-2020-18451 MEDIUM 4.8 DOWNGRADE Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd functio

FAQ

How do I fix damicms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is damicms being exploited right now?

None of the tracked damicms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which damicms CVE should I patch first?

CVE-2020-21236 currently ranks highest (47/100): A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise .

RSS feed for damicms · ← Back to latest CVEs