Advisories · Technology
haxtheweb haxcms-php.
Every CVE that names haxtheweb haxcms-php among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
haxtheweb/haxcms-php uses insecure method for generating salt
- haxtheweb haxcms-php
- Weak cryptography or TLS
- CVSS 8.7 High
HAXCMS PHP has a File Upload Validation Bypass
- haxtheweb haxcms-php
- Unrestricted file upload
- CVSS 8.8 High
HAX CMS Missing Secure Flag on Cookie
- haxtheweb haxcms-php
- CWE-614
- CVSS 6.5 Medium
haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0
- haxtheweb haxcms-php
- haxtheweb haxcms-nodejs
- Path traversal
- CVSS 7.7 High
HAX CMS Vulnerable to Command Injection using Git.php
- haxtheweb haxcms-php
- Command injection
- CVSS 8.7 High
HAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validation
- haxtheweb haxcms-php
- Unrestricted file upload
- CWE-178
- CVSS 6.9 Medium
HAX CMS has Unauthenticated Git Access via User-Controlled Key
- haxtheweb haxcms-php
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
Authenticated Remote Code Execution via File Overwrite
- haxtheweb haxcms-nodejs
- haxtheweb haxcms-php
- Path traversal
- Command injection