CyberSecBulletin

Schlix vulnerabilities

We track 2 vulnerabilities in Schlix products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 31, 2024.

2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score

Latest Schlix vulnerabilities

  • 7.2 High severity

    CMS: Unrestricted Upload of File with Dangerous Type

    CVE-2023-31505SchlixEPSS 1.16%

    An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated attackers to execute arbitrary code and obtain sensitive information via a crafted .phtml file.

  • 8.8 High severity

    cms: Incorrect Authorization

    CVE-2022-45544SchlixEPSS 1.32%

    Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and execute arbitrary code via the tristao parameter. NOTE: this is disputed by the vendor because an admin is intentionally allowed to upload new