RapidCMS vulnerabilities
10 known vulnerabilities in RapidCMS from OpenRapid. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
RapidCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack r
- 9.8 Critical severity
RapidCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been classified as critical. This affects an unknown part of the file /admin/user/user-move-run.php. The manipulation of the argument username leads to sql injection. It is possible to initiat
- 8.8 High severity
RapidCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. Affected by this vulnerability is the function isImg of the file /admin/config/uploadicon.php. The manipulation of the argument fileName leads to unrestricted upload. The at
- 9.8 Critical severity
RapidCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file /resource/addgood.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The e
- 7.2 High severity
RapidCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file /admin/category/cate-edit-run.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack rem
- 7.2 High severity
RapidCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in OpenRapid RapidCMS 1.3.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/article/article-edit-run.php. The manipulation of the argument id leads to sql injection. The attack m
- 9.8 Critical severity
RapidCMS: Weak Password Recovery Mechanism for Forgotten Password
A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical. This issue affects some unknown processing of the file admin/run-movepass.php. The manipulation of the argument password/password2 leads to weak password recovery. The attack may
- 9.8 Critical severity
RapidCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely.
- 9.8 Critical severity
RapidCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the
- 7.2 High severity
RapidCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/upload.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiate