generic content management system vulnerabilities and fixes

Recent CVEs affecting generic content management system, with upgrade or downgrade steps. 4 tracked.

Also searched as: genericcontentmanagementsystem.

generic content management system has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2018-12-30. Highest priority: CVE-2018-20569 (score 58/100).

• CVE-2018-20590 MEDIUM 4.8 UPGRADE Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.ph
• CVE-2018-20589 MEDIUM 4.8 UPGRADE Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pict
• CVE-2018-20569 CRITICAL 9.8 UPGRADE user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection
• CVE-2018-20568 CRITICAL 9.8 UPGRADE Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL

FAQ

How do I fix generic content management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is generic content management system being exploited right now?

None of the tracked generic content management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which generic content management system CVE should I patch first?

CVE-2018-20569 currently ranks highest (58/100): user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection.

RSS feed for generic content management system · ← Back to latest CVEs