Read the docs

Encapscms

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Encapscms records in CISA KEV

No Encapscms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Encapscms · all components

Priority MEDIUM 45

Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) config[path] parameter to (a) common_foot.php or (b) blogs.php, or (2) the c…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09336 Published 2007-01-31 No fix listed
Open these records in search →