Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Njtech Subscribe
Filtered by product Greencms
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-28918 1 Njtech 1 Greencms 2022-05-04 5.5 MEDIUM 8.1 HIGH
GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&plugin_name=.
CVE-2018-12604 1 Njtech 1 Greencms 2018-08-10 5.0 MEDIUM 7.5 HIGH
GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.
CVE-2018-11670 1 Njtech 1 Greencms 2018-06-29 6.8 MEDIUM 8.8 HIGH
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to execute arbitrary PHP code via the content parameter to index.php?m=admin&c=media&a=fileconnect.
CVE-2018-11671 1 Njtech 1 Greencms 2018-06-29 6.8 MEDIUM 8.8 HIGH
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an admin account via index.php?m=admin&c=access&a=adduserhandle.