Databay

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Databay records in CISA KEV

No Databay vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Maxcms 3 records LOW

Records

3 records in Maxcms · all components

TI-2009-03265 CVE-2009-3426 · GHSA-pgvx-9xhm-x4w5

PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS…

LOW 34

PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS 3.11.20b allows remote attackers to execute arbitrary PHP code via a URL in the fm_includes_special parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01913 Published 2009-09-25 No fix listed CWE-94

TI-2009-03263 CVE-2009-3424 · GHSA-94gc-q6xg-j8wh

Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when…

LOW 34

Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) is_projectPath parameter to includes/Inst…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0189 Published 2009-09-25 No fix listed CWE-94

TI-2009-03264 CVE-2009-3425 · GHSA-cqgg-3gcf-cxj8

Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS…

LOW 28

Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMS_root parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02922 Published 2009-09-25 No fix listed CWE-22

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0