Sitemagic CMS 4.4
Approved changes feed: RSS · Atom
cpe:2.3:a:sitemagic:sitemagic_cms:4.4:*:*:*:*:*:*:*
part: a version: 4.4 update: *
| Vendor | Sitemagic (babf1c6b-4bc2-5f6e-a6c5-b1e267419ecb) |
|---|---|
| Product | Sitemagic Cms (9465efbe-7871-5fc6-96ab-0f44c8206520) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jemt/sitemagiccms |
purl2cpe | 2026-06-01 10:12:29.986724 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9042 |
vulnerable | 2026-06-08 05:14:24.910210 |
Details available
An issue was discovered in Sitemagic CMS v4.4. In the index.php?SMExt=SMFiles URI, the user can upload a .php file to execute arbitrary code, as demonstrated by 404.php. This can only occur if the administrator neglects to set FileExtensionFilter and there are untrusted user accounts. NOTE: The maintainer states that this is not a vulnerability but a feature used in conjunction with External Modules
Published: 2019-02-23T18:00:00.000Z
Updated: 2024-11-15T15:17:04.154Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.