Vendors / Cim Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Cim Project records in CISA KEV No Cim Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
install/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a crafted prefix value because of configuration file mishandling in the N=83 case, as demonstrated by a call to the PHP fputs fun…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02236 · Published 2019-02-10 · No fix listed CWE-94
Priority LOW 35
public\install\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install/#/step3 URI.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01303 · Published 2018-12-30 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
1 1 0 0 0
