Login Request a demo
GX
Product
Gxlcms
by Gxlcms · last CVE Aug 12, 2021
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 4Medium 2Low 0
Severity
All severities9Critical3High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Gxlcms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-20975
9.8
1%
Aug 12
In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter
Affected: 1.1
CVE-2018-18488
9.8
1%
Oct 18
In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter
Affected: 2.0
CVE-2018-14685
9.8
2%
Jul 28
The add function in www/Lib/Lib/Action/Admin/TplAction.class.php in Gxlcms v1.1.4 allows remote attackers to read arbitrary files via a crafted index.php?s=Admin-Tpl-ADD-id…
Affected: 1.1.4
Showing 3