Cuppacms vulnerabilities
We track 5 vulnerabilities in Cuppacms products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on December 20, 2023.
Latest Cuppacms vulnerabilities
- 9.8 Critical severity
Cuppacms: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in components/table_manager/html/edit_admin_table.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter.
- 9.8 Critical severity
Cuppacms: Improper Control of Generation of Code
Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Configuration.php. This vulnerability is triggered via a crafted payload.
- 9.8 Critical severity
Cuppacms: Improper Neutralization of Special Elements used in an SQL Command
CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.
- 9.8 Critical severity
Cuppacms: Unrestricted Upload of File with Dangerous Type
The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file.
- 7.5 High severity
Cuppacms: Improper Neutralization of Special Elements used in an SQL Command
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menu_filter=3 parameter.