VendorsMax-3000maxsite_cms108
Vulnerabilities

Max-3000 MaxSite CMS 108

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2022-25411
A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.
Published 2022-02-28 · Modified
9.8EPSS 0.030
CVE-2022-25412
Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.
Published 2022-02-28 · Modified
8.1EPSS 0.011
CVE-2022-25410
Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.
Published 2022-02-28 · Modified
5.4EPSS 0.005
CVE-2022-25413
Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.
Published 2022-02-28 · Modified
5.4EPSS 0.005