CVE-2020-36763
Published Jul 31, 2023Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post.
Vendor/product archive
duxcms_project / duxcms CVEs
Beta · best-effort7 CVEs tagged to duxcms_project / duxcms — 1 Critical, 2 High, 3 Medium, 1 Low, 0 Unrated.
CVE-2020-21881
Published Jul 31, 2023Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add.
CVE-2020-21862
Published Jul 6, 2023Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.
CVE-2020-21861
Published Jul 6, 2023File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.
CVE-2020-36610
Published Dec 8, 2022A vulnerability was found in annyshow DuxCMS 2.1. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forger…
CVE-2020-36609
Published Dec 8, 2022A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the comp…
CVE-2021-3242
Published Feb 16, 2022DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.
Showing 1-7 of 7 CVEsPage 1 of 1