Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/pagekit/pagekit@1.0.8
Typecomposer
Namespacepagekit
Namepagekit
Version1.0.8
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-4b6k-tr9h-z7b2
vulnerability_id VCID-4b6k-tr9h-z7b2
summary An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67165
reference_id
reference_type
scores
0
value 0.00125
scoring_system epss
scoring_elements 0.31226
published_at 2026-06-11T12:55:00Z
1
value 0.00125
scoring_system epss
scoring_elements 0.31419
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67165
1
reference_url https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67165
reference_id CVE-2025-67165
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:31:33Z/
url https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67165
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67165
reference_id CVE-2025-67165
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67165
3
reference_url https://github.com/advisories/GHSA-w3j8-9p3j-3wjx
reference_id GHSA-w3j8-9p3j-3wjx
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w3j8-9p3j-3wjx
4
reference_url https://github.com/pagekit/pagekit
reference_id pagekit
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:31:33Z/
url https://github.com/pagekit/pagekit
5
reference_url https://github.com/pagekit/docs/blob/develop/user-interface/users.md#permissions
reference_id users.md#permissions
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:31:33Z/
url https://github.com/pagekit/docs/blob/develop/user-interface/users.md#permissions
6
reference_url https://github.com/pagekit/docs/blob/develop/user-interface/users.md#roles
reference_id users.md#roles
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:31:33Z/
url https://github.com/pagekit/docs/blob/develop/user-interface/users.md#roles
fixed_packages
aliases CVE-2025-67165, GHSA-w3j8-9p3j-3wjx
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4b6k-tr9h-z7b2
1
url VCID-86f9-mdmh-jbbj
vulnerability_id VCID-86f9-mdmh-jbbj
summary SQL injection in pagekit/pagekit
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-44135
reference_id
reference_type
scores
0
value 0.00272
scoring_system epss
scoring_elements 0.51014
published_at 2026-06-12T12:55:00Z
1
value 0.00272
scoring_system epss
scoring_elements 0.50881
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-44135
1
reference_url https://huntr.dev/bounties/82f09b08-ceeb-4249-8855-b8bc718c4868
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/82f09b08-ceeb-4249-8855-b8bc718c4868
2
reference_url https://huntr.dev/bounties/82f09b08-ceeb-4249-8855-b8bc718c4868/
reference_id
reference_type
scores
url https://huntr.dev/bounties/82f09b08-ceeb-4249-8855-b8bc718c4868/
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-44135
reference_id CVE-2021-44135
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-44135
4
reference_url https://github.com/advisories/GHSA-45hc-r4fj-qj89
reference_id GHSA-45hc-r4fj-qj89
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-45hc-r4fj-qj89
fixed_packages
aliases CVE-2021-44135, GHSA-45hc-r4fj-qj89
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-86f9-mdmh-jbbj
2
url VCID-kyhu-u4v4-6kfq
vulnerability_id VCID-kyhu-u4v4-6kfq
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14381
reference_id
reference_type
scores
0
value 0.00199
scoring_system epss
scoring_elements 0.41943
published_at 2026-06-11T12:55:00Z
1
value 0.00199
scoring_system epss
scoring_elements 0.42107
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14381
1
reference_url https://github.com/pagekit/pagekit/issues/905
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pagekit/pagekit/issues/905
2
reference_url https://github.com/pagekit/pagekit/releases/tag/1.0.14
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pagekit/pagekit/releases/tag/1.0.14
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-14381
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-14381
fixed_packages
0
url pkg:composer/pagekit/pagekit@1.0.14
purl pkg:composer/pagekit/pagekit@1.0.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4b6k-tr9h-z7b2
1
vulnerability VCID-86f9-mdmh-jbbj
2
vulnerability VCID-mnta-3rft-aqfd
3
vulnerability VCID-y8vq-atne-2ydw
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pagekit/pagekit@1.0.14
aliases CVE-2018-14381, GHSA-v47j-rw9h-6m47
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kyhu-u4v4-6kfq
3
url VCID-mnta-3rft-aqfd
vulnerability_id VCID-mnta-3rft-aqfd
summary An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-67164
reference_id
reference_type
scores
0
value 0.00112
scoring_system epss
scoring_elements 0.29218
published_at 2026-06-11T12:55:00Z
1
value 0.00112
scoring_system epss
scoring_elements 0.29419
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-67164
1
reference_url https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67164
reference_id CVE-2025-67164
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-12-17T18:29:34Z/
url https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67164
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-67164
reference_id CVE-2025-67164
reference_type
scores
0
value 9.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-67164
3
reference_url https://github.com/advisories/GHSA-m4f2-xpfq-h97v
reference_id GHSA-m4f2-xpfq-h97v
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m4f2-xpfq-h97v
fixed_packages
aliases CVE-2025-67164, GHSA-m4f2-xpfq-h97v
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mnta-3rft-aqfd
4
url VCID-tt3d-1ty4-sbaj
vulnerability_id VCID-tt3d-1ty4-sbaj
summary
references
0
reference_url http://ruffsecurity.blogspot.com/2018/05/my-first-cve-found.html
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://ruffsecurity.blogspot.com/2018/05/my-first-cve-found.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-11564
reference_id
reference_type
scores
0
value 0.00952
scoring_system epss
scoring_elements 0.76822
published_at 2026-06-11T12:55:00Z
1
value 0.00952
scoring_system epss
scoring_elements 0.76893
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-11564
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-11564
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-11564
3
reference_url https://packetstormsecurity.com/files/148001/PageKit-CMS-1.0.13-Cross-Site-Scripting.html
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packetstormsecurity.com/files/148001/PageKit-CMS-1.0.13-Cross-Site-Scripting.html
4
reference_url https://www.exploit-db.com/exploits/44837
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/44837
5
reference_url https://www.exploit-db.com/exploits/44837/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/44837/
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/44837.py
reference_id CVE-2018-11564
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/44837.py
fixed_packages
0
url pkg:composer/pagekit/pagekit@1.0.14
purl pkg:composer/pagekit/pagekit@1.0.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4b6k-tr9h-z7b2
1
vulnerability VCID-86f9-mdmh-jbbj
2
vulnerability VCID-mnta-3rft-aqfd
3
vulnerability VCID-y8vq-atne-2ydw
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pagekit/pagekit@1.0.14
aliases CVE-2018-11564, GHSA-3rwj-v7jp-w542
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tt3d-1ty4-sbaj
5
url VCID-ueau-9u7h-xqcj
vulnerability_id VCID-ueau-9u7h-xqcj
summary Pagekit Weak Password Recovery Mechanism for Forgotten Password
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-5594
reference_id
reference_type
scores
0
value 0.04542
scoring_system epss
scoring_elements 0.89457
published_at 2026-06-12T12:55:00Z
1
value 0.04542
scoring_system epss
scoring_elements 0.89421
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-5594
1
reference_url https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b
2
reference_url https://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf
3
reference_url https://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt
4
reference_url https://www.exploit-db.com/exploits/41143
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/41143
5
reference_url http://www.securityfocus.com/bid/95806
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/95806
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/41143.rb
reference_id CVE-2017-5594
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/41143.rb
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-5594
reference_id CVE-2017-5594
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-5594
8
reference_url https://github.com/advisories/GHSA-rp89-32rp-qpq2
reference_id GHSA-rp89-32rp-qpq2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rp89-32rp-qpq2
fixed_packages
0
url pkg:composer/pagekit/pagekit@1.0.11
purl pkg:composer/pagekit/pagekit@1.0.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4b6k-tr9h-z7b2
1
vulnerability VCID-86f9-mdmh-jbbj
2
vulnerability VCID-kyhu-u4v4-6kfq
3
vulnerability VCID-mnta-3rft-aqfd
4
vulnerability VCID-tt3d-1ty4-sbaj
5
vulnerability VCID-y8vq-atne-2ydw
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pagekit/pagekit@1.0.11
aliases CVE-2017-5594, GHSA-rp89-32rp-qpq2
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ueau-9u7h-xqcj
6
url VCID-y8vq-atne-2ydw
vulnerability_id VCID-y8vq-atne-2ydw
summary Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45967
reference_id
reference_type
scores
0
value 0.00209
scoring_system epss
scoring_elements 0.43395
published_at 2026-06-11T12:55:00Z
1
value 0.00209
scoring_system epss
scoring_elements 0.43552
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45967
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45967
reference_id CVE-2024-45967
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45967
2
reference_url https://github.com/advisories/GHSA-xw32-6422-frqm
reference_id GHSA-xw32-6422-frqm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xw32-6422-frqm
3
reference_url https://github.com/yingning620/test123/blob/main/Pagekit%20CMS/Pagekit%20CMS%20v1.0.18%20%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md
reference_id Pagekit%20CMS%20v1.0.18%20%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-01T14:42:55Z/
url https://github.com/yingning620/test123/blob/main/Pagekit%20CMS/Pagekit%20CMS%20v1.0.18%20%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md
fixed_packages
aliases CVE-2024-45967, GHSA-xw32-6422-frqm
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y8vq-atne-2ydw
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/pagekit/pagekit@1.0.8