Ci4-cms-erp

Ci4ms

27 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2026-34560

Exploit
  • EPSS 0.03%
  • Veröffentlicht 01.04.2026 21:21:33
  • Zuletzt bearbeitet 13.04.2026 18:00:22

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application renders user-controlled input unsafely within the logs interface....

9

CVE-2026-34559

Exploit
  • EPSS 0.02%
  • Veröffentlicht 01.04.2026 21:20:51
  • Zuletzt bearbeitet 13.04.2026 18:02:00

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when creating or...

9

CVE-2026-34558

Exploit
  • EPSS 0.05%
  • Veröffentlicht 30.03.2026 20:24:36
  • Zuletzt bearbeitet 06.04.2026 16:10:04

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input within the Metho...

9

CVE-2026-34557

Exploit
  • EPSS 0.05%
  • Veröffentlicht 30.03.2026 20:24:24
  • Zuletzt bearbeitet 06.04.2026 16:53:19

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input within group and...

7.2

CVE-2026-27599

Exploit
  • EPSS 0.02%
  • Veröffentlicht 30.03.2026 20:24:08
  • Zuletzt bearbeitet 06.04.2026 17:42:14

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input within System Se...

8.8

CVE-2026-25510

Exploit
  • EPSS 0.16%
  • Veröffentlicht 03.02.2026 21:17:02
  • Zuletzt bearbeitet 10.02.2026 18:41:41

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Execut...

5.3

CVE-2026-25509

  • EPSS 0.03%
  • Veröffentlicht 03.02.2026 21:16:29
  • Zuletzt bearbeitet 10.02.2026 18:41:26

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, the authentication implementation in CI4MS is vulnerable to email enumeration. An...