Asp4cms

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Asp4cms records in CISA KEV

No Asp4cms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Aspcms · all components

TI-2017-10749 CVE-2017-14653 · GHSA-cpgf-3whm-jr4g

LOW 31

member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a modified OrderNo parameter.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01051 Published 2017-09-22 No fix listed CWE-200