Imagecms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Imagecms records in CISA KEV

No Imagecms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Imagecms 2 records LOW

Records

2 records in Imagecms · all components

TI-2012-05123 CVE-2012-6290 · GHSA-h9cf-gghr-p937

SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated…

LOW 36

SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL commands via the q parameter to admin/admin_search/.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04316 Published 2014-03-11 No fix listed CWE-89

TI-2013-05999 CVE-2013-7334 · GHSA-4v57-p22c-8frv

Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote…

LOW 32

Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q parameter, related t…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0092 Published 2014-03-11 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0