Tilde Cms Project Tilde Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Tilde Cms Project Tilde Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2017-11324 — CVSS 9.8 (critical): An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is…
• CVE-2017-11325 — CVSS 7.5 (high): An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php.
• CVE-2017-11326 — CVSS 7.5 (high): An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a…
• CVE-2017-11327 — CVSS 6.5 (medium): An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can…