VendorsportfolioCMS Projectportfoliocms1.0.5
Vulnerabilities

portfolioCMS Project portfolioCMS 1.0.5

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2018-12263
portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI.
Published 2018-06-13 · Modified
8.8EPSS 0.011
CVE-2018-15848
An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true.
Published 2018-08-25 · Modified
8.8EPSS 0.005
CVE-2020-20402
Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation.
Published 2023-01-31 · Modified
7.5EPSS 0.007
CVE-2018-12110
portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter.
Published 2018-06-11 · Modified
7.2EPSS 0.011
CVE-2018-15849
An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php.
Published 2018-08-25 · Modified
4.3EPSS 0.004