Kitesky

kitesky

9 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-3267 1Kitesky 1Kitecms Jun 17, 2026 Apr 4, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function.
CVE-2021-31707 1Kitesky 1Kitecms Jun 17, 2026 Apr 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type.
CVE-2020-20522 1Kitesky 1Kitecms Jun 17, 2026 Apr 4, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter.
CVE-2020-20521 1Kitesky 1Kitecms Jun 17, 2026 Apr 4, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter.
CVE-2021-36546 1Kitesky 1Kitecms Jun 17, 2026 Feb 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.
CVE-2022-28445 1Kitesky 1Kitecms Jun 17, 2026 Apr 21, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.
CVE-2020-20672 1Kitesky 1Kitecms Jun 17, 2026 Sep 13, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.
CVE-2020-20671 1Kitesky 1Kitecms Jun 17, 2026 Sep 13, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
CVE-2021-31731 1Kitesky 1Kitecms Jun 17, 2026 Aug 12, 2021 N/A· v4 6.5 MEDIUM· v3 5.5 MEDIUM· v2 A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter.