COOEY // HUBcompliance · community · intelligence

FAIL › dossier

cuppacms vendor

2

failure events

0

zero-days

0

RCEs

0

on KEV

2

critical

35

worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 4 events

Date	Event	Sev	Flags	Shame	Summary
2022-04-26	CVE-2022-27984	critical		35	CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.
2022-04-26	CVE-2022-27984	critical		35	CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.
2022-04-26	CVE-2022-27985	critical		35	CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php.
2022-04-26	CVE-2022-27985	critical		35	CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php.