Dimofinf

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Dimofinf records in CISA KEV

No Dimofinf vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Infinity Script 2 records LOW Dawaween 1 record LOW Dimofinf Cms 1 record LOW

Records

4 records

TI-2009-03161 CVE-2009-3319 · GHSA-q26p-2pjc-36qx

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote…

LOW 35

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2009-09-23 No fix listed CWE-89

TI-2009-03056 CVE-2009-3211 · GHSA-7r3c-83p4-h28h

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when…

LOW 34

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01917 Published 2009-09-16 No fix listed CWE-22

TI-2009-03057 CVE-2009-3212 · GHSA-3cp9-95xq-76hw

SQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc…

LOW 32

SQL injection vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username field.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01019 Published 2009-09-16 No fix listed CWE-89

TI-2018-08673 CVE-2018-12094 · GHSA-v8cv-hrxr-vq25

Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows…

LOW 28

Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01688 Published 2018-06-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0