Sploitus

19 exploited vulnerabilities in Empirecms

Vulnerabilities with publicly known exploits

Vendors
Empirecms, Empire, Empiresoft
With known exploits
19
Affected Phome Empire Phome Empire Cms versions
= 5.1
Affected Phome Empirecms versions
= 6.6

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2023-50073
CVSS 9.8 CRITICAL 2023-12-14FIX AVAILABLE
CVE-2022-28585
CVSS 9.8 CRITICAL 2022-05-03FIX AVAILABLE
CVE-2020-22937
CVSS 9.8 CRITICAL 2021-08-17FIX AVAILABLE
CVE-2018-20300
CVSS 9.8 CRITICAL 2018-12-20FIX AVAILABLE
CVE-2018-18869
CVSS 9.8 CRITICAL 2018-10-31FIX AVAILABLE
CVE-2025-15423
CVSS 8.8 HIGH 2026-01-02FIX AVAILABLE
CVE-2018-18449
CVSS 8.8 HIGH 2019-03-07FIX AVAILABLE
CVE-2018-18086
CVSS 8.8 HIGH 2018-10-09FIX AVAILABLE
CVE-2018-16339
CVSS 8.8 HIGH 2018-09-02FIX AVAILABLE
CVE-2025-15422
CVSS 7.5 HIGH 2026-01-02FIX AVAILABLE
CVE-2009-2269 1 exploit
CVSS 7.5 HIGH 2009-07-01
Empire CMS 47 - SQL Injection
CVE-2023-50162
CVSS 7.2 HIGH 2024-01-08
CVE-2018-19462
CVSS 7.2 HIGH 2019-06-07FIX AVAILABLE
CVE-2012-5777 2 exploits
CVSS 6.8 MEDIUM 2012-11-16FIX AVAILABLE
EmpireCMS 6.6 PHP Code Execution VulnerabilityEmpireCMS 6.6 PHP Code Execution
CVE-2019-12362
CVSS 6.1 MEDIUM 2019-05-27FIX AVAILABLE
CVE-2019-12361
CVSS 6.1 MEDIUM 2019-05-27
CVE-2018-6881
CVSS 5.3 MEDIUM 2018-02-12FIX AVAILABLE
CVE-2018-6880
CVSS 5.3 MEDIUM 2018-02-12FIX AVAILABLE
CVE-2018-19461
CVSS 4.8 MEDIUM 2019-06-07