Eshtery.she7ata

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Eshtery.she7ata records in CISA KEV

No Eshtery.she7ata vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Eshtery Cms 2 records MEDIUM

Records

2 records

TI-2014-01630 CVE-2014-2069 · GHSA-8v54-89gr-p9gq

Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read…

MEDIUM 49

Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.aspx.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.15441 Published 2018-04-13 No fix listed CWE-22

TI-2010-03240 CVE-2010-3404 · GHSA-cqfp-9rxf-m432

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote…

LOW 35

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the (1) Criteria field in an unspecified form related to catlgsearch.aspx or (2) user n…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2010-09-16 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0