Where
-Infinity
0

Trending

Last week
Last month
Last year

sscms Siteserver CmsSQL Injection

Risk 86
Severity
9.8
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.

First published (updated )
CVE-2022-44297

sscms Siteserver CmsSQL Injection

Risk 86
Severity
9.8
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SiteServer CMS 7.1.3 is vulnerable to SQL Injection.

First published (updated )
CVE-2022-44298

sscms Siteserver CmsPath Traversal

Risk 30
Severity
4.9
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

SiteServerCMS 7.1.3 sscms has a file read vulnerability.

First published (updated )
CVE-2022-44299

sscms Siteserver CmsMalicious File Upload

Risk 86
Severity
9.8
Malicious File Upload
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.

First published (updated )
CVE-2021-42654

sscms Siteserver CmsXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability.

First published (updated )
CVE-2021-42656

sscms Siteserver CmsSQL Injection

Risk 79
Severity
8.8
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

First published (updated )
CVE-2021-42655

Siteservercms Project SiteservercmsSiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService…

Risk 66
Severity
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.

First published (updated )
CVE-2022-36226

sscms Siteserver CmsXSS

Risk 38
Severity
6.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).

First published (updated )
CVE-2022-30349

sscms Siteserver CmsSiteServer CMS search cross site scripting

Risk 38
Severity
6.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-229818 is the identifier assigned to this vulnerability.

First published (updated )
CVE-2023-2862

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203