Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Creasito records in CISA KEVNo Creasito vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 38
Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to (1) addnewcont.php, (2) adminpassw.php, (3) amministrazione…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02883 · Published 2006-11-07 · No fix listed
Priority LOW 32
Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00913 · Published 2010-07-09 · No fix listed CWE-89
