Insanevisions

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Insanevisions records in CISA KEV

No Insanevisions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Onecms 4 records LOW Adaptcms 3 records LOW Adapcms 1 record LOW Adaptbb 1 record LOW

Records

3 records in Adaptcms · all components

TI-2015-00954 CVE-2015-1059 · GHSA-v2g4-fcv2-r5m3

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote…

LOW 37

Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.05427 Published 2015-01-16 No fix listed CWE-94

TI-2015-00955 CVE-2015-1060 · GHSA-vvvw-jjxx-8hjc

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3…

LOW 33

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.04398 Published 2015-01-16 No fix listed

TI-2015-00953 CVE-2015-1058 · GHSA-r6p3-67c7-656h

Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Category][title] parameter to admin/categories/add, (2) data[Field][tit…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04266 Published 2015-01-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	7
Low	0
No CVSS	0