Read the docs

C97net

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

C97net records in CISA KEV

No C97net vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mblog 1 record LOW

Records

4 records

TI-2014-08436 CVE-2014-125138 · GHSA-78p8-fwwm-2xrr

Unrestricted file upload in C97net qEngine CMS and other products

Priority HIGH 73

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00423 Published 2026-10-28 No fix listed CWE-434
TI-2014-08434 CVE-2014-125136 · GHSA-hhvm-rp85-j9hh

Database backup exposure in C97net qEngine CMS and two other products

Priority HIGH 69

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information disclosure vulnerability that exposes database backups in the web-accessible /admin/backup directory.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00412 Published 2026-10-28 No fix listed CWE-530
TI-2014-08435 CVE-2014-125137 · GHSA-c4x8-8fmf-prcq

Local file inclusion in C97net qEngine CMS and related products

Priority MEDIUM 64

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file inclusion vulnerability in the run parameter of admin/task.php.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00718 Published 2026-10-28 No fix listed CWE-98
Open these records in search →