Vulnerabilidades de Ritecms
CVEs publicadas que afetam produtos de Ritecms: 6 registro(s), com severidade, exploração e correções.
CVE-2025-67174
Alta · 7.5
CWE-22 17/12/2025
Path Traversal em Ritecms
A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_page_language_file in the admin.php component
CVE-2025-67173
Média · 6.8
CWE-352 17/12/2025
Cross-Site Request Forgery (CSRF) em Ritecms
A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request.
CVE-2025-67170
Média · 6.1
CWE-20 17/12/2025
Improper Input Validation em Ritecms
A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.
CVE-2025-67171
Alta · 7.5
CWE-22 17/12/2025
Path Traversal em Ritecms
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
CVE-2025-67168
Média · 5.3
CWE-916 17/12/2025
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
CVE-2025-67172
Alta · 7.2
CWE-78 17/12/2025
OS Command Injection em Ritecms
RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.