GCVE - cpe:2.3:a:openrapid:rapidcms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openrapid:rapidcms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Openrapid (`09224c86-c5bd-5a4f-9852-43cfca91bae1`)
Product	Rapidcms (`35866aa6-921f-5419-8b02-a9c0032c314b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/openrapid/rapidcms`	purl2cpe	2026-06-01 10:12:20.828009

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-8335`	vulnerable	2026-06-08 07:00:24.271915	OpenRapid RapidCMS runlogon.php sql injection MEDIUM (6.3) A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2024-08-30T12:31:31.646Z Updated: 2024-08-30T13:09:47.680Z Open on db.gcve.eu Reference links https://vuldb.com/?id.276210 https://vuldb.com/?ctiid.276210 https://vuldb.com/?submit.399005 https://gitee.com/A0kooo/cve_article/blob/master/RapidCMS/SQL%20injection2/rapidcms%20runlogon.php%20SQL%20injection.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8331`	vulnerable	2026-06-08 07:00:24.265616	OpenRapid RapidCMS user-move-run.php sql injection MEDIUM (6.3) A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been classified as critical. This affects an unknown part of the file /admin/user/user-move-run.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2024-08-30T11:00:08.995Z Updated: 2024-08-30T14:47:40.348Z Open on db.gcve.eu Reference links https://vuldb.com/?id.276207 https://vuldb.com/?ctiid.276207 https://vuldb.com/?submit.398769 https://gitee.com/A0kooo/cve_article/blob/master/RapidCMS/SQL%20injection1/rapidcms%20user-move-run.php%20SQL%20injection.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5262`	vulnerable	2026-06-08 06:19:43.058561	OpenRapid RapidCMS uploadicon.php isImg unrestricted upload MEDIUM (6.3) A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. Affected by this vulnerability is the function isImg of the file /admin/config/uploadicon.php. The manipulation of the argument fileName leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240871. Published: 2023-09-29T13:31:05.044Z Updated: 2024-08-02T07:52:08.632Z Open on db.gcve.eu Reference links https://vuldb.com/?id.240871 https://vuldb.com/?ctiid.240871 https://github.com/OpenRapid/rapidcms/issues/10 https://github.com/yhy217/rapidcms-vul/issues/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5258`	vulnerable	2026-06-08 06:19:43.046408	OpenRapid RapidCMS addgood.php sql injection MEDIUM (6.3) A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file /resource/addgood.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240867. Published: 2023-09-29T11:31:04.769Z Updated: 2024-08-02T07:52:08.536Z Open on db.gcve.eu Reference links https://vuldb.com/?id.240867 https://vuldb.com/?ctiid.240867 https://github.com/OpenRapid/rapidcms/issues/9 https://github.com/yhy217/rapidcms-vul/issues/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5033`	vulnerable	2026-06-08 06:19:40.735479	OpenRapid RapidCMS cate-edit-run.php sql injection MEDIUM (6.3) A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file /admin/category/cate-edit-run.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239877 was assigned to this vulnerability. Published: 2023-09-18T04:31:04.707Z Updated: 2024-08-02T07:44:53.777Z Open on db.gcve.eu Reference links https://vuldb.com/?id.239877 https://vuldb.com/?ctiid.239877 https://github.com/yhy217/rapidcms-vul/issues/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5032`	vulnerable	2026-06-08 06:19:40.734607	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5031`	vulnerable	2026-06-08 06:19:40.733076	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4448`	vulnerable	2026-06-08 06:16:12.386885	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4447`	vulnerable	2026-06-08 06:16:12.386403	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4446`	vulnerable	2026-06-08 06:16:12.385138	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3852`	vulnerable	2026-06-08 06:09:40.698788	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Rapidcms

Notes

PURL mappings

Vulnerability references

Contribute