Portfoliocms Project

portfoliocms_project

6 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-36532 1Portfoliocms Project 1Portfoliocms Mar 26, 2025 Feb 3, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.
CVE-2020-20402 1Portfoliocms Project 1Portfoliocms Mar 27, 2025 Jan 31, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation.
CVE-2018-15849 1Portfoliocms Project 1Portfoliocms Nov 21, 2024 Aug 25, 2018 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php.
CVE-2018-15848 1Portfoliocms Project 1Portfoliocms Nov 21, 2024 Aug 25, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true.
CVE-2018-12263 1Portfoliocms Project 1Portfoliocms Nov 21, 2024 Jun 13, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI.
CVE-2018-12110 1Portfoliocms Project 1Portfoliocms Nov 21, 2024 Jun 11, 2018 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter.