Anantasoft

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Anantasoft records in CISA KEV

No Anantasoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gazelle Cms 5 records LOW Ananta Cms 1 record LOW Ananta Gazelle 1 record LOW

Records

7 records

TI-2009-03025 CVE-2009-3180 · GHSA-9r85-jqv2-rmpv

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other…

LOW 37

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02085 Published 2009-09-11 No fix listed CWE-255

TI-2009-03027 CVE-2009-3182 · GHSA-9rq4-g25h-r3w7

Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in…

LOW 36

Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then acces…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03286 Published 2009-09-11 No fix listed CWE-264

TI-2008-06354 CVE-2008-6665 · GHSA-4965-f67j-6qhc

change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers…

LOW 34

change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01826 Published 2009-04-08 No fix listed CWE-94

TI-2009-03026 CVE-2009-3181 · GHSA-c2rh-3265-vp8c

Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers…

LOW 27

Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02045 Published 2009-09-11 No fix listed CWE-22

TI-2011-03259 CVE-2011-3702 · GHSA-w42f-mvfv-2f9r

Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct…

LOW 26

Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/template.php and certain…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

TI-2009-03012 CVE-2009-3167 · GHSA-mqc9-c5v8-8hw8

Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when…

LOW 25

Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02349 Published 2009-09-11 No fix listed CWE-22

TI-2009-03016 CVE-2009-3171 · GHSA-wmvv-2fxc-9j89

Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0153 Published 2009-09-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	6
Low	0
No CVSS	0