Login Request a demo
GX
Product
Gxlcms
by Gxlcms · last CVE Aug 12, 2021
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 4Medium 2Low 0
Severity
All severities9Critical3High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Gxlcms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-15177
8.8
1%
Aug 8
In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account
Affected: 2.0
CVE-2018-18487
7.5
1%
Oct 18
In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in predictable database backup file locations
Affected: 2.0
CVE-2017-14979
7.5
1%
Oct 3
Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s…
Affected: All versions, or not specified
CVE-2018-16436
7.2
1%
Sep 5
Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator
Affected: 2.0
Showing 4