Cosmocms

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cosmocms records in CISA KEV

No Cosmocms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Cosmo · all components

TI-2018-07371 CVE-2018-10429 · GHSA-2pjp-4c9p-2rhv

MEDIUM 46

Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01756 Published 2018-04-26 No fix listed CWE-94