Anantasoft

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Anantasoft records in CISA KEV

No Anantasoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gazelle Cms 5 records LOW Ananta Cms 1 record LOW Ananta Gazelle 1 record LOW

Records

5 records in Gazelle Cms · all components

TI-2009-03025 CVE-2009-3180 · GHSA-9r85-jqv2-rmpv

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other…

LOW 37

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02085 Published 2009-09-11 No fix listed CWE-255

TI-2009-03027 CVE-2009-3182 · GHSA-9rq4-g25h-r3w7

Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in…

LOW 36

Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then acces…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03286 Published 2009-09-11 No fix listed CWE-264

TI-2009-03026 CVE-2009-3181 · GHSA-c2rh-3265-vp8c

Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers…

LOW 27

Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02045 Published 2009-09-11 No fix listed CWE-22

TI-2009-03012 CVE-2009-3167 · GHSA-mqc9-c5v8-8hw8

Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when…

LOW 25

Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02349 Published 2009-09-11 No fix listed CWE-22

TI-2009-03016 CVE-2009-3171 · GHSA-wmvv-2fxc-9j89

Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0153 Published 2009-09-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	6
Low	0
No CVSS	0