generic content management system project vulnerabilities

Recent CVEs affecting generic content management system project products. 4 tracked.

generic content management system project has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2018-12-30. Highest priority: CVE-2018-20569 (score 58/100).

• CVE-2018-20590 MEDIUM 4.8 UPGRADE Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.ph
• CVE-2018-20589 MEDIUM 4.8 UPGRADE Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pict
• CVE-2018-20569 CRITICAL 9.8 UPGRADE user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection
• CVE-2018-20568 CRITICAL 9.8 UPGRADE Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL

FAQ

How do I fix generic content management system project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is generic content management system project being exploited right now?

None of the tracked generic content management system project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which generic content management system project CVE should I patch first?

CVE-2018-20569 currently ranks highest (58/100): user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection.

Products

• generic content management system

RSS feed for generic content management system project · ← Back to latest CVEs