Anecms

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Anecms records in CISA KEV

No Anecms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Anecms 2 records LOW Anecms Blog 2 records LOW

Records

2 records in Anecms Blog · all components

TI-2010-02339 CVE-2010-2436 · GHSA-44jj-9jpw-493g

SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly…

LOW 35

SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00971 Published 2010-06-24 No fix listed CWE-89

TI-2010-02340 CVE-2010-2437 · GHSA-p7rv-pxf2-6jmq

Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and…

LOW 23

Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the comment variable to modules/blog/index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01452 Published 2010-06-24 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0