Orckestra
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| C1-CMS-Foundation | 2 | – | Sep 27, 2022 |
| C1 CMS | 1 | – | Nov 15, 2021 |
Exploited and recent CVEs
- CVE-2022-39256 Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution. 1.7%
- CVE-2022-24789 Deserialization of untrusted data in C1 CMS. 0.8%
- CVE-2021-34992 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exi 4.3%