Sploitus

19 exploited vulnerabilities in Nonecms

Vulnerabilities with publicly known exploits

Vendors
None, Thinkphp, Nonecms
With known exploits
19
Affected 5none Nonecms versions
= 1.3.0
Affected Insane Visions Onecms versions
≤ 2.4
Affected Insanevisions Onecms versions
= 2.5, 2.6.1

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2018-20062 5 exploits
CVSS 10.0 CRITICAL 2018-12-11FIX AVAILABLE
Vulmap - Web Vulnerability Scanning And Verification ToolsThinkPHP - Multiple PHP Injection RCEs (Metasploit)
CVE-2018-7219
CVSS 8.8 HIGH 2018-02-19FIX AVAILABLE
CVE-2020-18647
CVSS 7.5 HIGH 2021-06-22FIX AVAILABLE
CVE-2020-18646
CVSS 7.5 HIGH 2021-06-22FIX AVAILABLE
CVE-2018-6029
CVSS 7.5 HIGH 2018-01-23FIX AVAILABLE
CVE-2008-7209 1 exploit
CVSS 7.5 HIGH 2009-09-11FIX AVAILABLE
OneCMS 2.4 - SQL Injection / Upload
CVE-2008-6652 1 exploit
CVSS 7.5 HIGH 2009-04-07FIX AVAILABLE
OneCMS 2.5 - Blind SQL Injection
CVE-2008-2482 1 exploit
CVSS 7.5 HIGH 2008-05-28FIX AVAILABLE
OneCMS 2.5 - 'install_mod.php' Local File Inclusion
CVE-2007-5016 1 exploit
CVSS 7.5 HIGH 2007-09-20FIX AVAILABLE
OneCMS 2.4 - 'abc' SQL Injection
CVE-2010-0952 1 exploit
CVSS 6.8 MEDIUM 2010-03-09FIX AVAILABLE
OneCMS 2.5 - SQL Injection
CVE-2008-7208 1 exploit
CVSS 6.8 MEDIUM 2009-09-11FIX AVAILABLE
OneCMS 2.4 - SQL Injection / Upload
CVE-2019-16721
CVSS 6.5 MEDIUM 2019-09-23FIX AVAILABLE
CVE-2018-6022
CVSS 6.5 MEDIUM 2018-01-23FIX AVAILABLE
CVE-2020-18282
CVSS 6.1 MEDIUM 2023-05-08
CVE-2020-23376
CVSS 6.1 MEDIUM 2021-05-10
CVE-2020-23371
CVSS 6.1 MEDIUM 2021-05-10
CVE-2020-23374
CVSS 5.4 MEDIUM 2021-05-10FIX AVAILABLE
CVE-2020-23373
CVSS 5.4 MEDIUM 2021-05-10FIX AVAILABLE
CVE-2010-4877 1 exploit
CVSS 4.3 MEDIUM 2011-10-07FIX AVAILABLE
OneCMS 2.6.1 - 'index.php' Cross-Site Scripting