SSiberianCMS

Products

Exploited and recent CVEs

• CVE-2024-41702 Critical 9.8 SiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 0.5%
• CVE-2023-39378 High 8.8 SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user 0.9%
• CVE-2023-39377 High 7.2 SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method 1.0%
• CVE-2023-39376 Medium 6.5 SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network 0.4%
• CVE-2023-39375 High 7.5 SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges 0.8%