Read the docs

Insane Visions

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Insane Visions records in CISA KEV

No Insane Visions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Onecms 3 records MEDIUM Blogphp 2 records LOW

Records

5 records

TI-2008-06897 CVE-2008-7209 · GHSA-68j2-2v53-vhg2

Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4…

Priority MEDIUM 42

Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06007 Published 2009-09-11 No fix listed CWE-264
TI-2006-00308 CVE-2006-0318 · GHSA-ppmw-wjmq-4fr9

SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is…

Priority LOW 36

SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01379 Published 2006-01-19 No fix listed CWE-89
TI-2008-06896 CVE-2008-7208 · GHSA-q7xr-35mh-wq2h

Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote…

Priority LOW 34

Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username parameter ($usernameb variable) to a_login.php or (2) user paramet…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01768 Published 2009-09-11 No fix listed CWE-89
Open these records in search →