Threat database

5 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.7%	CVE-2024-34315CmsEasy · n/a High7.5EPSS 0.7%2024-05-07CVE Database V5CVE-2024-34315 CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fckedit_action method of /admin/template_admin.php. This vulnerability allows attackers to read arbitrary files. EPSS 0.7%Vulnerability	CVE Database V5	2024-05-07
Low	3.5	EPSS 0.4%	CVE-2024-32236cmseasy · n/a Low3.5EPSS 0.4%2024-04-25CVE Database V5CVE-2024-32236 An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component. EPSS 0.4%Vulnerability	CVE Database V5	2024-04-25
Medium	6.4	EPSS 0.3%	CVE-2024-32163CMSeasy · n/a Medium6.4EPSS 0.3%2024-04-17CVE Database V5CVE-2024-32163 CMSeasy 7.7.7.9 is vulnerable to code execution. EPSS 0.3%Vulnerability	CVE Database V5	2024-04-17
Medium	4.3	EPSS 0.4%	CVE-2024-32162CMSeasy · n/a Medium4.3EPSS 0.4%2024-04-17CVE Database V5CVE-2024-32162 CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion. EPSS 0.4%Vulnerability	CVE Database V5	2024-04-17
Medium	4.9	EPSS 0.6%	CVE-2024-25828cmseasy · n/a Medium4.9EPSS 0.6%2024-02-22CVE Database V5CVE-2024-25828 cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php. EPSS 0.6%Vulnerability	CVE Database V5	2024-02-22

Page 1 of 1