NanoCMS vulnerabilities
2 known vulnerabilities in NanoCMS from Kalyan02. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest first
- 7.5 High severity
NanoCMS: Direct Request
A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown functionality of the file /data/pagesdata.txt of the component User Information Handler. Performing a manipulation results in direct request. It is possible to i
- 8.8 High severity
NanoCMS: Unrestricted Upload of File with Dangerous Type
NanoCMS 0.4 contains an authenticated file upload vulnerability that allows remote code execution through unvalidated page content creation. Authenticated attackers can upload PHP files with arbitrary code to the server's pages directory by exploiting the page