Creatiwity WityCMS 0.6.2
Approved changes feed: RSS · Atom
cpe:2.3:a:creatiwity:witycms:0.6.2:*:*:*:*:*:*:*part: a version: 0.6.2 update: *
| Vendor | Creatiwity (c82bce0a-2e80-5ee8-8a53-e40e1a805a20) |
|---|---|
| Product | Witycms (02e47a3b-3afb-53e2-b381-02b045a3ceed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/creatiwity/witycms |
purl2cpe | 2026-06-01 10:14:35.396618 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-29725 |
vulnerable | 2026-06-08 05:42:48.771985 |
Details available
An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file.
Published: 2022-05-31T13:31:32.000Z
Updated: 2024-08-03T06:33:42.475Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16776 |
vulnerable | 2026-06-08 05:11:05.469887 |
Details available
wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.
Published: 2018-09-10T04:00:00.000Z
Updated: 2024-08-05T10:32:54.118Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16251 |
vulnerable | 2026-06-08 05:11:04.575773 |
Details available
A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtered, e.g., the /admin/user/users Nickname, email, firstname, lastname, and groupe parameters.
Published: 2019-06-20T13:23:46.000Z
Updated: 2024-08-05T10:17:38.300Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16250 |
vulnerable | 2026-06-08 05:11:04.575276 |
Details available
The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first name" and "last name" parameters.
Published: 2019-06-20T13:42:10.000Z
Updated: 2024-08-05T10:17:38.434Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14029 |
vulnerable | 2026-06-08 05:10:52.614754 |
Details available
CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifying the account's email field.
Published: 2018-07-13T02:00:00.000Z
Updated: 2024-08-05T09:21:40.953Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12065 |
vulnerable | 2026-06-08 05:10:39.783682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.