Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2013-5316 1 Ritecms 1 Ritecms 2025-04-11 N/A
Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.
CVE-2013-5317 1 Ritecms 1 Ritecms 2025-04-11 N/A
Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to cms/index.php.
CVE-2020-23934 1 Ritecms 1 Ritecms 2024-11-21 8.8 High
An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section.