Foecms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Foecms records in CISA KEV

No Foecms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Foecms 3 records LOW

Records

3 records in Foecms · all components

TI-2014-03988 CVE-2014-4850 · GHSA-rq2q-6mpw-576g

SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute…

LOW 35

SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01287 Published 2014-07-10 No fix listed CWE-89

TI-2014-03989 CVE-2014-4851 · GHSA-9vx6-wq2c-qc53

Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect…

LOW 28

Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the r parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01149 Published 2014-07-10 No fix listed

TI-2014-03987 CVE-2014-4849 · GHSA-256v-c957-m9f7

Multiple cross-site scripting (XSS) vulnerabilities in msg.php in FoeCMS allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in msg.php in FoeCMS allow remote attackers to inject arbitrary web script or HTML via the (1) e or (2) r parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00991 Published 2014-07-10 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0