Advisories · Technology

SiberianCMS.

Every CVE that names SiberianCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-1105 CVE record

CVSS 5.3 Medium

SiberianCMS HTTP GET Request flat cross site scripting
- SiberianCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 7 Feb 2025
CVE-2023-39378 CVE record

CVSS 8.8 High

SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user
- SiberianCMS
- SQL injection
Not analysed yet 26 Sept 2023
CVE-2023-39377 CVE record

CVSS 7.2 High

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method
- SiberianCMS
- Unrestricted file upload
Not analysed yet 26 Sept 2023
CVE-2023-39376 CVE record

CVSS 6.5 Medium

SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network
- SiberianCMS
- Broken access control
Not analysed yet 26 Sept 2023
CVE-2023-39375 CVE record

CVSS 7.5 High

SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges
- SiberianCMS
- CWE-274
Not analysed yet 26 Sept 2023