Vulnerabilities of n/a https://github.com/concrete5/concrete5
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-30118 | Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description:… | Not rated | Jun 24, 2022 |
| CVE-2022-30120 | XSS in /dashboard/blocks/stacks/view_details/ - old browsers only | Not rated | Jun 24, 2022 |
| CVE-2022-21829 | Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from… | Not rated | Jun 24, 2022 |
| CVE-2022-30119 | XSS in /dashboard/reports/logs/view - old browsers only | Not rated | Jun 24, 2022 |
| CVE-2022-30117 | Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload… | Not rated | Jun 24, 2022 |
| CVE-2021-22954 | A cross-site request forgery vulnerability exists in Concrete… | Not rated | Feb 9, 2022 |
| CVE-2021-22968 | A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in… | Not rated | Nov 19, 2021 |
| CVE-2021-22967 | In Concrete CMS (formerly concrete 5) below 8.5.7, IDOR Allows Unauthenticated User to Access Restricted Files If… | Not rated | Nov 19, 2021 |
| CVE-2021-22951 | Unauthorized individuals could view password protected files using view_inline in Concrete CMS (previously concrete 5)… | Not rated | Nov 19, 2021 |
| CVE-2021-22966 | Privilege escalation from Editor to Admin using Groups in Concrete CMS versions 8.5.6 and below | Not rated | Nov 19, 2021 |
| CVE-2021-22970 | Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system… | Not rated | Nov 19, 2021 |
| CVE-2021-22969 | Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an… | Not rated | Nov 19, 2021 |
| CVE-2021-22958 | A Server-Side Request Forgery vulnerability was found in concrete5 < 8.5.5 that allowed a decimal notation encoded IP… | Not rated | Oct 7, 2021 |
| CVE-2021-22953 | A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience,… | Not rated | Sep 23, 2021 |
| CVE-2021-22950 | Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to… | Not rated | Sep 23, 2021 |
| CVE-2021-22949 | A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience,… | Not rated | Sep 23, 2021 |
Other n/a products
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79