Cromosoft

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cromosoft records in CISA KEV

No Cromosoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Facil Helpdesk 2 records LOW Simple Plantilla Php 2 records MEDIUM

Records

2 records in Simple Plantilla Php · all components

TI-2007-01106 CVE-2007-1139 · GHSA-qm9j-8489-27qv

Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows…

MEDIUM 48

Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitrary scripts via a filename with a double extension.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02608 Published 2007-02-27 No fix listed CWE-94

TI-2007-01105 CVE-2007-1138 · GHSA-3mpc-j5x7-cjc8

Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple…

LOW 28

Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolde…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02654 Published 2007-02-27 No fix listed CWE-22

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0