Kitesky Kitecms 1.1
Approved changes feed: RSS · Atom
cpe:2.3:a:kitesky:kitecms:1.1:*:*:*:*:*:*:*part: a version: 1.1 update: *
| Vendor | Kitesky (f667fadf-c8ac-5caf-9a52-8366488b5830) |
|---|---|
| Product | Kitecms (c48c1b39-34b8-5edc-b3ef-2a65b1ac5aef) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitee/kitesky/kitecms |
purl2cpe | 2026-06-01 10:16:55.487701 |
pkg:github/kitesky/kitecms |
purl2cpe | 2026-06-01 10:16:55.487702 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-3267 |
vulnerable | 2026-06-08 05:33:51.054874 |
Details available
File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function.
Published: 2023-04-04T00:00:00.000Z
Updated: 2025-02-18T17:10:59.200Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36546 |
vulnerable | 2026-06-08 05:32:52.264654 |
Details available
Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.
Published: 2023-02-03T00:00:00.000Z
Updated: 2025-03-26T16:17:35.205Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20672 |
vulnerable | 2026-06-08 05:22:30.506635 |
Details available
An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.
Published: 2021-09-13T21:13:10.000Z
Updated: 2024-08-04T14:22:25.360Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20671 |
vulnerable | 2026-06-08 05:22:30.506089 |
Details available
A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
Published: 2021-09-13T21:13:09.000Z
Updated: 2024-08-04T14:22:25.071Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20522 |
vulnerable | 2026-06-08 05:22:30.422937 |
Details available
Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter.
Published: 2023-04-04T00:00:00.000Z
Updated: 2025-02-14T16:13:12.335Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.