← Back

Arcms Project

arcms_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Arcms
arcms
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-19558
1Arcms Project
1Arcms
Nov 21, 2024
Nov 26, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php.
CVE-2018-19557
1Arcms Project
1Arcms
Nov 21, 2024
Nov 26, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images.