CVE-2023-49735
High
Path Traversal
<1.3.10, >=2.0.0
April 17, 2024
CVE-2023-34396
Medium
Denial of Service
<1.3.10, >=2.0.5 <2.5.31, >=6.0.0 <6.1.2.1
June 14, 2023
CVE-2008-2025
Low
Cross-Site Scripting
<1.2.9
April 30, 2008
CVE-2006-1548
Low
Cross-Site Scripting
<1.2.9
March 23, 2006
CVE-2006-1547
High
Denial of Service
<1.2.9
March 23, 2006
CVE-2006-1546
High
Authorization Bypass
<1.2.9
March 23, 2006
CVE-2014-0114
High
Remote Code Execution
<=1.9.2
February 1, 2024
CVE-2016-1182
High
Cross-Site Scripting
>=1.0.0 <=1.3.10
February 1, 2024
CVE-2016-1181
High
Authorization Bypass
>=1.0.0 <=1.3.10
February 1, 2024
CVE-2015-0899
High
Authorization Bypass
>=1.1.0 <=1.3.10
February 1, 2024
CVE-2012-1007
Low
Cross-Site Scripting
<=1.3.10
February 1, 2024
CVE-2014-0094
Medium
Remote Code Execution
>=2.0.0, <2.3.16.2
March 6, 2014
CVE-2016-3081
High
Remote Code Execution
>=2.3.19 <2.3.20.3, >=2.3.21 <2.3.24.3, >=2.3.25 <2.3.28.1
April 20, 2016
CVE-2018-11776
Critical
Remote Code Execution
>=2.3.0 <2.3.35, >=2.5.0 <2.5.17
August 18, 2022
CVE-2017-5638
Critical
Command Injection
>= 2.3.5 - <2.3.31, >=2.5 - <2.5.10
March 16, 2017
CVE-2024-53677
Critical
Remote Code Execution
>=2.0.0 <=2.3.37, >=2.5.0 <=2.5.33, >=6.0.0 <=6.3.0.2
December 17, 2024