Read the docs

Concept Intermedia

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Concept Intermedia records in CISA KEV

No Concept Intermedia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
S@m Cms 3 records MEDIUM

Records

4 records

TI-2024-03560 CVE-2024-3816

SQLi in S@M CMS

Priority MEDIUM 49

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2024-06-28 No fix listed CWE-89
TI-2025-06727 CVE-2025-7385 · GHSA-92m7-gm53-fg8x

SQL Injection in GOV CMS

Priority MEDIUM 48

Input from search query parameter in GOV CMS is not sanitized properly, leading to a Blind SQL injection vulnerability, which might be exploited by an unauthenticated remote attacker.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00449 Published 2025-09-04 Fixed in 4.0 CWE-89
TI-2024-03547 CVE-2024-3801

XSS in S@M CMS

Priority LOW 27

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00329 Published 2024-06-28 No fix listed CWE-79
TI-2024-03546 CVE-2024-3800

XSS in S@M CMS

Priority LOW 27

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00294 Published 2024-06-28 No fix listed CWE-79
Open these records in search →