Advisories · Technology
thoefter CMS Commander – Manage Multiple Sites.
Every CVE that names thoefter CMS Commander – Manage Multiple Sites among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
CMS Commander <= 2.288 - Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter
- thoefter CMS Commander – Manage Multiple Sites
- SQL injection
- CVSS 8.1 High
CMS Commander <= 2.287 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature
- thoefter CMS Commander – Manage Multiple Sites
- CWE-345