Aas9

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Aas9 records in CISA KEV

No Aas9 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zerocms 5 records MEDIUM

Records

5 records

TI-2014-03289 CVE-2014-4034 · GHSA-4ggm-3cfx-2c89

SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote…

MEDIUM 42

SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0625 Published 2014-06-11 No fix listed CWE-89

TI-2015-01308 CVE-2015-1442 · GHSA-j49p-v92f-mgvj

SQL injection vulnerability in views/zero_transact_user.php in the administrative backend…

LOW 37

SQL injection vulnerability in views/zero_transact_user.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the user_id parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02368 Published 2015-02-06 No fix listed CWE-89

TI-2014-03419 CVE-2014-4194 · GHSA-p3q7-2gx5-pjfq

SQL injection vulnerability in zero_transact_article.php in ZeroCMS 1.0 allows remote…

LOW 35

SQL injection vulnerability in zero_transact_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter in a Submit Comment action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01241 Published 2014-07-09 No fix listed CWE-89

TI-2014-03878 CVE-2014-4710 · GHSA-vpxw-9g4m-68cj

Cross-site scripting (XSS) vulnerability in zero_user_account.php in ZeroCMS 1.0 allows…

LOW 26

Cross-site scripting (XSS) vulnerability in zero_user_account.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03217 Published 2014-07-29 No fix listed CWE-79

TI-2014-03420 CVE-2014-4195 · GHSA-ww6h-7hc8-mm6x

Cross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the article_id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01427 Published 2014-07-03 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	2
Low	0
No CVSS	0