Erocms

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Erocms records in CISA KEV

No Erocms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Erocms · all components

TI-2008-02667 CVE-2008-2792 · GHSA-3vmj-7qg7-gvfg

LOW 35

SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2008-06-20 No fix listed CWE-89