Havalite

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Havalite records in CISA KEV

No Havalite vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cms 4 records LOW Havalite 1 record LOW

Records

5 records

TI-2012-04919 CVE-2012-5894 · GHSA-hpf8-fq4j-xr48

SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows…

LOW 35

SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01119 Published 2012-11-17 No fix listed CWE-89

TI-2012-04918 CVE-2012-5893 · GHSA-qc77-grrc-jpc5

Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and…

LOW 35

Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif extension, then accessing it via a direct…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02846 Published 2012-11-17 No fix listed

TI-2013-00096 CVE-2013-0161 · GHSA-26rx-mmh7-vvg6

Havalite CMS 1.1.7 has a stored XSS vulnerability

LOW 26

Havalite CMS 1.1.7 has a stored XSS vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00972 Published 2020-01-29 No fix listed CWE-79

TI-2012-04917 CVE-2012-5892 · GHSA-8p64-g888-56pp

Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with…

LOW 26

Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0148 Published 2012-11-17 No fix listed CWE-264

TI-2012-04944 CVE-2012-5919 · GHSA-9865-2p5q-66jx

Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) find or (2) replace fields to havalite/findReplace.php; (3) user…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01822 Published 2012-11-19 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	4
Low	0
No CVSS	0