Vulnerabilidades de Pagekit
CVEs publicadas que afetam produtos de Pagekit: 4 registro(s), com severidade, exploração e correções.
CVE-2026-57518
Alta · 8.8
CWE-862 26/06/2026
Pagekit CMS 1.0.18 Privilege Escalation via UserApiController
Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privileges by assigning arbitrary custom roles to themselves due to missing authorization checks in UserApiController::saveAction(). Attackers can assign themselves a custom role with the 'system: manage packages' permission and then upload and install a malicious PHP package through the admin package installer to achieve remote code execution.
CVE-2026-6652
Média · 4.7
CWE-94 20/04/2026
Pagekit CMS StringStorage Template PhpEngine.php evaluate eval injection
A weakness has been identified in Pagekit CMS up to 1.0.18. This issue affects the function evaluate of the file app/modules/view/src/PhpEngine.php of the component StringStorage Template Handler. This manipulation causes improper neutralization of directives in dynamically evaluated code. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-67165
Crítica · 9.8
CWE-639 17/12/2025
Authorization Bypass Through User-Controlled Key (IDOR) em Pagekit
An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.
CVE-2025-67164
Crítica · 9.9
CWE-78 17/12/2025
OS Command Injection em Pagekit
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file.