BeesCMS 4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:beescms:beescms:4.0:*:*:*:*:*:*:*part: a version: 4.0 update: *
| Vendor | Beescms (5dcf0c2d-d20f-5093-b4e0-da973ec3ea8c) |
|---|---|
| Product | Beescms (8c1aa2e1-6bd4-532c-8f61-84c0e13dd8ff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/itfooter/beescms |
purl2cpe | 2026-06-01 10:11:05.754035 |
pkg:github/source-trace/beescms |
purl2cpe | 2026-06-01 10:11:05.754038 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-31011 |
vulnerable | 2026-06-08 06:35:30.797390 |
Details available
Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admin_template.php.
Published: 2024-04-03T00:00:00.000Z
Updated: 2024-08-20T14:57:33.385Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23572 |
vulnerable | 2026-06-08 05:22:31.975567 |
Details available
BEESCMS v4.0 was discovered to contain an arbitrary file upload vulnerability via the component /admin/upload.php. This vulnerability allows attackers to execute arbitrary code via a crafted image file.
Published: 2021-11-08T20:46:52.000Z
Updated: 2024-08-04T14:58:14.986Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-22334 |
vulnerable | 2026-06-08 05:22:31.395579 |
Details available
Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/admin_admin.php.
Published: 2023-05-08T00:00:00.000Z
Updated: 2025-01-29T16:48:57.949Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8347 |
vulnerable | 2026-06-08 05:14:23.926544 |
Details available
BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=user URI.
Published: 2019-02-15T15:00:00.000Z
Updated: 2024-08-04T21:17:30.552Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12739 |
vulnerable | 2026-06-08 05:10:41.913510 |
Details available
In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.
Published: 2018-07-05T20:00:00.000Z
Updated: 2024-08-05T08:45:01.170Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10266 |
vulnerable | 2026-06-08 05:10:26.533554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.