Gelatocms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Gelatocms records in CISA KEV

No Gelatocms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gelatocms 3 records LOW

Records

3 records

TI-2007-04740 CVE-2007-4918 · GHSA-4phw-xx96-wm6w

SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers…

LOW 36

SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01622 Published 2007-09-17 No fix listed CWE-89

TI-2008-03519 CVE-2008-3675 · GHSA-28jm-hff2-853w

Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote…

LOW 28

Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files via (1) a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0292 Published 2008-08-14 No fix listed CWE-22

TI-2008-06727 CVE-2008-7039 · GHSA-f6j8-hr9j-495h

Cross-site scripting (XSS) vulnerability in admin/comments.php in Gelato CMS 0.95 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in admin/comments.php in Gelato CMS 0.95 allows remote attackers to inject arbitrary web script or HTML via the content parameter in a comment.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2009-08-24 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0