VendorsDuxcms Projectduxcms2.1
Vulnerabilities

Duxcms Project Duxcms 2.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2020-21861
File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.
Published 2023-07-06 · Modified
8.8EPSS 0.007
CVE-2020-21862
Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.
Published 2023-07-06 · Modified
8.1EPSS 0.010
CVE-2020-36610
annyshow DuxCMS cross-site request forgery
Published 2022-12-08 · Modified
8.0EPSS 0.005
CVE-2020-21881
Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add.
Published 2023-07-31 · Modified
6.5EPSS 0.003
CVE-2020-36763
Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post.
Published 2023-07-31 · Modified
5.4EPSS 0.005
CVE-2020-36609
annyshow DuxCMS Article edit cross site scripting
Published 2022-12-08 · Modified
5.4EPSS 0.004