Customcms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Customcms records in CISA KEV

No Customcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ccms 2 records MEDIUM Gaming Portal 1 record LOW

Records

3 records

TI-2008-04318 CVE-2008-4526 · GHSA-44rr-gfh8-vw22

Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to…

MEDIUM 49

Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03456 Published 2008-10-09 No fix listed CWE-22

TI-2007-06354 CVE-2007-6658 · GHSA-g8g6-72vx-vxpg

SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows…

LOW 35

SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbitrary SQL commands via the p parameter in the Console page.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01169 Published 2008-01-04 No fix listed CWE-89

TI-2008-03987 CVE-2008-4156 · GHSA-4rv4-vpmj-m97r

SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when…

LOW 32

SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00937 Published 2008-09-19 No fix listed CWE-89

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0