Read the docs

Cmsphp Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Cmsphp Project records in CISA KEV

No Cmsphp Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cmsphp 1 record LOW

Records

1 record in Cmsphp · all components

TI-2009-03358 CVE-2009-3520 · GHSA-hg77-2mmh-2xqw

Cross-site request forgery (CSRF) vulnerability in the Your_account module in CMSphp 0.21…

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in the Your_account module in CMSphp 0.21 allows remote attackers to hijack the authentication of administrators for requests that change an administrator password via the…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00646 Published 2009-10-01 No fix listed CWE-352
Open these records in search →