Crux Software

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Crux Software records in CISA KEV

No Crux Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gallery 2 records LOW Cruxcms 1 record LOW

Records

3 records

TI-2008-04276 CVE-2008-4484 · GHSA-rrjm-whcf-6m77

main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative…

LOW 35

main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative access by setting the name parameter to "users," as demonstrated via index.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02575 Published 2008-10-08 No fix listed CWE-264

TI-2008-04275 CVE-2008-4483 · GHSA-379x-7473-fgrc

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when…

LOW 34

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01857 Published 2008-10-08 No fix listed CWE-22

TI-2008-00668 CVE-2008-0700 · GHSA-j748-xg4f-5gvp

Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0…

LOW 22

Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01196 Published 2008-02-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0