Read the docs

Ferretcms Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Ferretcms Project records in CISA KEV

No Ferretcms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ferretcms 4 records MEDIUM

Records

4 records in Ferretcms · all components

TI-2015-01248 CVE-2015-1371 · GHSA-4qfh-mfjq-f23c

Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote…

Priority MEDIUM 44

Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08058 Published 2015-01-27 No fix listed CWE-20
TI-2015-01250 CVE-2015-1373 · GHSA-xg94-pwpg-xffq

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha…

Priority LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter in a search request, (2) username in a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03232 Published 2015-01-27 No fix listed CWE-79
Open these records in search →