Skip to content

Product

siteserver cms vulnerabilities

1 published CVE affecting siteserver cms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest siteserver cms CVEs

Newest publication first

  1. CVE-2019-11401 SiteServer CMS RCE via unsafe file upload

    Published
    HighCVSS 7.2 EPSS 2.8%

    A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.