GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities by synaptikcms

    CVE-2026-92247 (GCVE-0-2026-92247)

    Vulnerability from nvd – Published: 2026-09-16 02:45 – Updated: 2026-09-16 02:45
    VLAI
    Title
    synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload
    Summary
    A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.3.5 is able to mitigate this issue. It is suggested to upgrade the affected component.
    Severity
    5.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
    4.7 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
    4.7 (Medium)
    CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    synaptikcms synaptik-cms Affected: 1.3.4.0
    Affected: 1.3.4.1
    Affected: 1.3.4.2
    Affected: 1.3.4.3
    Affected: 1.3.4.4
    Unaffected: 1.3.5
        cpe:2.3:a:synaptikcms:synaptik-cms:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    Dinesh_goud (VulDB User)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:synaptikcms:synaptik-cms:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Admin File Manager"
          ],
          "product": "synaptik-cms",
          "vendor": "synaptikcms",
          "versions": [
            {
              "status": "affected",
              "version": "1.3.4.0"
            },
            {
              "status": "affected",
              "version": "1.3.4.1"
            },
            {
              "status": "affected",
              "version": "1.3.4.2"
            },
            {
              "status": "affected",
              "version": "1.3.4.3"
            },
            {
              "status": "affected",
              "version": "1.3.4.4"
            },
            {
              "status": "unaffected",
              "version": "1.3.5"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Dinesh_goud (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.3.5 is able to mitigate this issue. It is suggested to upgrade the affected component."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5.8,
            "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-434",
              "description": "Unrestricted Upload",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T02:45:11.875Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-404682 | synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/404682"
        },
        {
          "name": "VDB-404682 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/404682/cti"
        },
        {
          "name": "CVE-2026-92247 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-92247"
        },
        {
          "name": "Submit #934183 | SynaptikCMS 1.3.4.4 remote code execution+path traversal",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/934183"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/d1n3sh-0x3/synaptikcms-security-research"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/synaptikcms/synaptik-cms/releases/tag/v1.3.5"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-15T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-15T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-15T22:37:35.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-92247",
    "datePublished": "2026-09-16T02:45:11.875Z",
    "dateReserved": "2026-09-15T20:32:29.447Z",
    "dateUpdated": "2026-09-16T02:45:11.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-92247 (GCVE-0-2026-92247)

    Vulnerability from cvelistv5 – Published: 2026-09-16 02:45 – Updated: 2026-09-16 02:45
    VLAI
    Title
    synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload
    Summary
    A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.3.5 is able to mitigate this issue. It is suggested to upgrade the affected component.
    Severity
    5.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
    4.7 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
    4.7 (Medium)
    CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    synaptikcms synaptik-cms Affected: 1.3.4.0
    Affected: 1.3.4.1
    Affected: 1.3.4.2
    Affected: 1.3.4.3
    Affected: 1.3.4.4
    Unaffected: 1.3.5
        cpe:2.3:a:synaptikcms:synaptik-cms:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    Dinesh_goud (VulDB User)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:synaptikcms:synaptik-cms:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Admin File Manager"
          ],
          "product": "synaptik-cms",
          "vendor": "synaptikcms",
          "versions": [
            {
              "status": "affected",
              "version": "1.3.4.0"
            },
            {
              "status": "affected",
              "version": "1.3.4.1"
            },
            {
              "status": "affected",
              "version": "1.3.4.2"
            },
            {
              "status": "affected",
              "version": "1.3.4.3"
            },
            {
              "status": "affected",
              "version": "1.3.4.4"
            },
            {
              "status": "unaffected",
              "version": "1.3.5"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Dinesh_goud (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.3.5 is able to mitigate this issue. It is suggested to upgrade the affected component."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5.8,
            "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-434",
              "description": "Unrestricted Upload",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T02:45:11.875Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-404682 | synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/404682"
        },
        {
          "name": "VDB-404682 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/404682/cti"
        },
        {
          "name": "CVE-2026-92247 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-92247"
        },
        {
          "name": "Submit #934183 | SynaptikCMS 1.3.4.4 remote code execution+path traversal",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/934183"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/d1n3sh-0x3/synaptikcms-security-research"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/synaptikcms/synaptik-cms/releases/tag/v1.3.5"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-15T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-15T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-15T22:37:35.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-92247",
    "datePublished": "2026-09-16T02:45:11.875Z",
    "dateReserved": "2026-09-15T20:32:29.447Z",
    "dateUpdated": "2026-09-16T02:45:11.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}